3 ms·
My understanding though is that the ASAN would have done its job, had the test checked for the results. Quoting from the post: > This fuzzer might have produce
by mk89 4y ago
My understanding though is that the ASAN would have done its job, had the test checked for the results. Quoting from the post:
> This fuzzer might have produced a SECKEYPublicKey that could have reached the vulnerable code, but as the result was never used to verify a signature, the bug could never be discovered.
If the result had been used, the ASAN would have kicked in, I guess, or?
- pjmlp 4y agoWell, it is a lot of conditionals, and in any case binaries are seldom shipped with ASAN into production, so it would still be a lottery outcome if the fuzzer would have generated that specific use case.