Merge pull request #1025 from f0rki/custom_mutator_havoc_uaf

fixed potential UAF with custom mutator havoc after realloc
This commit is contained in:
hexcoder
2021-07-15 11:14:33 +02:00
committed by GitHub

View File

@ -2057,7 +2057,7 @@ havoc_stage:
temp_len = new_len;
if (out_buf != custom_havoc_buf) {
afl_realloc(AFL_BUF_PARAM(out), temp_len);
out_buf = afl_realloc(AFL_BUF_PARAM(out), temp_len);
if (unlikely(!afl->out_buf)) { PFATAL("alloc"); }
memcpy(out_buf, custom_havoc_buf, temp_len);