Hacker News new | past | comments | ask | show | jobs | submit login

Why wasn't it found with afl-fuzz?



The RAR PPMd bug can only be triggered if many conditions are satisfied. For example, the RAR archive needs to be mostly correctly structured, and needs to have at least two items that are compressed with the right flags (e.g., RAR version 3, PPMd). Furthermore, the compressed streams need to be constructed such that the bugs are triggered. Hence, I believe the bug is difficult to hit with straightforward coverage-guided fuzzing.


Because AFL does not find every path-execution-based vulnerability?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: