oss-sec mailing list archives

Re: lame: multiple vulnerabilities

From: Agostino Sarubbo <ago () gentoo org>
Date: Wed, 28 Jun 2017 22:02:43 +0200

On Wednesday 28 June 2017 20:33:43 Hanno Böck wrote:

None of Agostinos samples trigger anything in an asan build of

mpg123

1.25.0 here. However I was quickly able to get afl to find another

bug,

Great!

I found also something else which I will report to the bt, but seems 
there is a null pointer dereference by default without any crafted 
input.

-- 
Agostino Sarubbo
Gentoo Linux Developer

Current thread:

lame: multiple vulnerabilities Agostino Sarubbo (Jun 28)
- Re: lame: multiple vulnerabilities Dr. Thomas Orgis (Jun 28)
  - Re: lame: multiple vulnerabilities Hanno Böck (Jun 28)
    - Re: lame: multiple vulnerabilities Agostino Sarubbo (Jun 28)