Segfaulting Python with afl-fuzz
tomforb.es
tomforb.es
https://github.com/serprex/Befunge/blob/master/funge.py
It'd be neat to see how PyPy handles fuzzing. It uses CPython's bytecode, I was able to get it to run beer6.bf (it was pretty slow, since that's a benchmark that mostly tests recompile speed) but it locked up when testing mandel.bf (odd since mandel.bf doesn't trigger recompilation)
Where you write:
> In laments terms
You probably want to write:
In layman's terms
"In layman's terms" is an idiomatic way of saying, simply put, or explaining something to somebody who might not be technically inclined.
To lament is to feel upset about something, it often refers to the grief one feels when a loved one has died.
Overall, this was an interesting read, and I'm looking forward to your next installment.
It's moderately-well-known that .pyc files execute arbitrary code (not just arbitrary Python code) inside the Python process. (See e.g. https://docs.python.org/2/library/marshal.html#module-marsha..., "Warning: The marshal module [i.e. loading .pyc files] is not intended to be secure against erroneous or maliciously constructed data. Never unmarshal data received from an untrusted or unauthenticated source." It is nice to see that afl can re-discover this issue, but I'm pretty sure it's not new.
So tune in next week :)
Bug reports here, along with possible patches, for GNU Awk:
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816277
* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=816271
Writeup was pretty simple:
* https://blog.steve.org.uk/If_line_noise_is_a_program__all_fu...