Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix crashers found via fuzzing #5

Merged
merged 3 commits into from
Nov 2, 2015
Merged

Conversation

drawks
Copy link
Contributor

@drawks drawks commented Aug 19, 2015

No description provided.

Dave Rawks added 3 commits August 19, 2015 14:09
Added a guarding defer to catch panics in protocol 0 and 1

- Protocol 0 guard added to opcode_DICT and opcode_SETITEM
- Protocol 1 guard added to opcode_SETITEMS
@dvyukov
Copy link

dvyukov commented Aug 20, 2015

Hi,

It can make sense to extend the Fuzz function to Unpickle, Pickle and then Unpickle again. You can also check that Pickle and second Unpickle do not fail, and also that results of Unpickle's are equal. See for example:
https://github.com/dvyukov/go-fuzz/blob/master/examples/xml/xml.go

@hydrogen18
Copy link
Owner

I'll review these soon.

@drawks
Copy link
Contributor Author

drawks commented Sep 17, 2015

Any word on when this might get merged? Code changes are pretty simple and definitely guard against reproducible panics...

hydrogen18 added a commit that referenced this pull request Nov 2, 2015
Fix crashers found via fuzzing
@hydrogen18 hydrogen18 merged commit 9b38526 into hydrogen18:master Nov 2, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants