PDA

View Full Version : A case of a curious LibTIFF 4.0.3 + zlib 1.2.8 memory disclosure


j00ru vx tech blog
April 30th, 2014, 10:29
As part of my daily routine, I tend to fuzz different popular open-source projects (such as FFmpeg, Libav or FreeType2) under numerous memory safety instrumentation tools developed at Google, such as AddressSanitizer, MemorySanitizer or ThreadSanitizer. Every now and then, I encounter an interesting report and spend the afternoon diving into the internals of a specific […]

http://j00ru.vexillium.org/?p=2296