ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-17 20:28:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix oob flip_bit in mopt code

Browse Source
This commit is contained in:
Andrea Fioraldi
2020-02-21 17:51:38 +01:00
parent 7323833888
commit 249cd2c766
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/afl-fuzz-one.c
View File

@ -3714,7 +3714,7 @@ pacemaker_fuzzing:
case 1: case 1:
if (temp_len < 2) break; if (temp_len < 2) break;
temp_len_puppet = UR(temp_len << 3); temp_len_puppet = UR((temp_len << 3) -1);
FLIP_BIT(out_buf, temp_len_puppet); FLIP_BIT(out_buf, temp_len_puppet);
FLIP_BIT(out_buf, temp_len_puppet + 1); FLIP_BIT(out_buf, temp_len_puppet + 1);
MOpt_globals.cycles_v2[STAGE_FLIP2] += 1; MOpt_globals.cycles_v2[STAGE_FLIP2] += 1;
@ -3722,7 +3722,7 @@ pacemaker_fuzzing:
case 2: case 2:
if (temp_len < 2) break; if (temp_len < 2) break;
temp_len_puppet = UR(temp_len << 3); temp_len_puppet = UR((temp_len << 3) -3);
FLIP_BIT(out_buf, temp_len_puppet); FLIP_BIT(out_buf, temp_len_puppet);
FLIP_BIT(out_buf, temp_len_puppet + 1); FLIP_BIT(out_buf, temp_len_puppet + 1);
FLIP_BIT(out_buf, temp_len_puppet + 2); FLIP_BIT(out_buf, temp_len_puppet + 2);