{"action":"created","issue":{"url":"https://api.github.com/repos/radare/radare2/issues/3450","labels_url":"https://api.github.com/repos/radare/radare2/issues/3450/labels{/name}","comments_url":"https://api.github.com/repos/radare/radare2/issues/3450/comments","events_url":"https://api.github.com/repos/radare/radare2/issues/3450/events","html_url":"https://github.com/radare/radare2/issues/3450","id":111095103,"number":3450,"title":"Pre-release fuzz-a-ton","user":{"login":"radare","id":917142,"avatar_url":"https://avatars.githubusercontent.com/u/917142?v=3","gravatar_id":"","url":"https://api.github.com/users/radare","html_url":"https://github.com/radare","followers_url":"https://api.github.com/users/radare/followers","following_url":"https://api.github.com/users/radare/following{/other_user}","gists_url":"https://api.github.com/users/radare/gists{/gist_id}","starred_url":"https://api.github.com/users/radare/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/radare/subscriptions","organizations_url":"https://api.github.com/users/radare/orgs","repos_url":"https://api.github.com/users/radare/repos","events_url":"https://api.github.com/users/radare/events{/privacy}","received_events_url":"https://api.github.com/users/radare/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/radare/radare2/labels/fuzzing","name":"fuzzing","color":"009800"},{"url":"https://api.github.com/repos/radare/radare2/labels/release","name":"release","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/radare/radare2/milestones/8","html_url":"https://github.com/radare/radare2/milestones/0.10.0","labels_url":"https://api.github.com/repos/radare/radare2/milestones/8/labels","id":1153073,"number":8,"title":"0.10.0","description":"","creator":{"login":"XVilka","id":203261,"avatar_url":"https://avatars.githubusercontent.com/u/203261?v=3","gravatar_id":"","url":"https://api.github.com/users/XVilka","html_url":"https://github.com/XVilka","followers_url":"https://api.github.com/users/XVilka/followers","following_url":"https://api.github.com/users/XVilka/following{/other_user}","gists_url":"https://api.github.com/users/XVilka/gists{/gist_id}","starred_url":"https://api.github.com/users/XVilka/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/XVilka/subscriptions","organizations_url":"https://api.github.com/users/XVilka/orgs","repos_url":"https://api.github.com/users/XVilka/repos","events_url":"https://api.github.com/users/XVilka/events{/privacy}","received_events_url":"https://api.github.com/users/XVilka/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":159,"state":"open","created_at":"2015-06-07T00:16:38Z","updated_at":"2015-11-13T10:30:20Z","due_on":null,"closed_at":null},"comments":36,"created_at":"2015-10-13T03:15:22Z","updated_at":"2015-11-17T10:51:59Z","closed_at":null,"body":"The purpose of this issue is to organize the fuzzing efforts in order to find bugs in r2 before the release:\r\n\r\n* [ ] RBin\r\n  * [x] ELF\r\n  * [x] PE (jvoisin)\r\n  * [x] Java class ← this will yield a **lot** of things quickly\r\n  * [x] MACH0\r\n  * [ ] FATMACH0\r\n  * [x] OMF\r\n  * [x] ObjectiveC classes\r\n  * [ ] Demangling\r\n  * [x] XBE\r\n* [ ] RCore\r\n * [x] libmagic\r\n * [ ] regex\r\n * [ ] feeds invalid commands to produce crash\r\n* [ ] RAnal\r\n * [ ] af - provide bytes with wx and analyze with various archs\r\n * [x] test various `e anal.` options\r\n\r\n*NOTE* Recommended build for fuzzing: 32bit x86 asan (`sys/asan.sh`)"},"comment":{"url":"https://api.github.com/repos/radare/radare2/issues/comments/157335593","html_url":"https://github.com/radare/radare2/issues/3450#issuecomment-157335593","issue_url":"https://api.github.com/repos/radare/radare2/issues/3450","id":157335593,"user":{"login":"revskills","id":2454862,"avatar_url":"https://avatars.githubusercontent.com/u/2454862?v=3","gravatar_id":"","url":"https://api.github.com/users/revskills","html_url":"https://github.com/revskills","followers_url":"https://api.github.com/users/revskills/followers","following_url":"https://api.github.com/users/revskills/following{/other_user}","gists_url":"https://api.github.com/users/revskills/gists{/gist_id}","starred_url":"https://api.github.com/users/revskills/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/revskills/subscriptions","organizations_url":"https://api.github.com/users/revskills/orgs","repos_url":"https://api.github.com/users/revskills/repos","events_url":"https://api.github.com/users/revskills/events{/privacy}","received_events_url":"https://api.github.com/users/revskills/received_events","type":"User","site_admin":false},"created_at":"2015-11-17T10:51:59Z","updated_at":"2015-11-17T10:51:59Z","body":"```sh\r\n==15205==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61900000b838 at pc 0x7fb23606c6a9 bp 0x7fff707884b0 sp 0x7fff70787c28\r\nREAD of size 205 at 0x61900000b838 thread T0\r\n    #0 0x7fb23606c6a8  (/lib64/libasan.so.2+0x606a8)\r\n    #1 0x7fb23606d605 in __interceptor_vsnprintf (/lib64/libasan.so.2+0x61605)\r\n    #2 0x7fb23606d871 in snprintf (/lib64/libasan.so.2+0x61871)\r\n    #3 0x7fb234e4d470 in get_sections /home/revskillz/dev/radare2/libr/..//libr/bin/p/../format/mach0/mach0.c:942\r\n    #4 0x7fb234e403bb in sections /home/revskillz/dev/radare2/libr/..//libr/bin/p/bin_mach0.c:98\r\n    #5 0x7fb234e44248 in size /home/revskillz/dev/radare2/libr/..//libr/bin/p/bin_mach0.c:555\r\n    #6 0x7fb234dc5f07 in r_bin_object_set_items /home/revskillz/dev/radare2/libr/bin/bin.c:468\r\n    #7 0x7fb234dca3e5 in r_bin_object_new /home/revskillz/dev/radare2/libr/bin/bin.c:1005\r\n    #8 0x7fb234dcab34 in r_bin_file_object_new_from_xtr_data /home/revskillz/dev/radare2/libr/bin/bin.c:1079\r\n    #9 0x7fb234dc92a4 in r_bin_files_populate_from_xtrlist /home/revskillz/dev/radare2/libr/bin/bin.c:850\r\n    #10 0x7fb234dc9474 in r_bin_file_xtr_load_bytes /home/revskillz/dev/radare2/libr/bin/bin.c:866\r\n    #11 0x7fb234dc8987 in r_bin_load_io_at_offset_as_sz /home/revskillz/dev/radare2/libr/bin/bin.c:728\r\n    #12 0x7fb234dc8b65 in r_bin_load_io_at_offset_as /home/revskillz/dev/radare2/libr/bin/bin.c:755\r\n    #13 0x7fb234dc804d in r_bin_load_io /home/revskillz/dev/radare2/libr/bin/bin.c:646\r\n    #14 0x7fb235c308c5 in r_core_file_do_load_for_io_plugin /home/revskillz/dev/radare2/libr/core/file.c:380\r\n    #15 0x7fb235c31530 in r_core_bin_load /home/revskillz/dev/radare2/libr/core/file.c:459\r\n    #16 0x55ab6748794c in main /home/revskillz/dev/radare2/binr/radare2/radare2.c:605\r\n    #17 0x7fb230afd57f in __libc_start_main (/lib64/libc.so.6+0x2057f)\r\n    #18 0x55ab674848c8 in _start (/home/revskillz/dev/radare2/binr/radare2/radare2+0x58c8)\r\n\r\nASAN:SIGSEGV\r\n==15205==AddressSanitizer\r\n```\r\n\r\nfile: http://revskills.cz/r2/6f29967c0c3bbbc0fff59bc00f047209\r\n"}}