[xml] https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43743



did anyone report https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43743 to libxml2 directly?

i work on Android and was asked about this bug recently, and will try to improve the channel for reporting fuzzer-found libxml2 bugs like this going forward, but for now (since the secrecy deadline on that one has expired anyway), i can at least point you in that direction.

sadly, it looks like there are actually a bunch of fuzzer-found bugs that may never have been reported upstream? (i haven't checked; i'm just guessing.) see https://bugs.chromium.org/p/oss-fuzz/issues/list?q=libxml2&can=2 for example.

i assume you've seen these kinds of bugs before, but let me know if you have trouble with the reproducers  ... not that i can ever remember how to do it myself, but i can find someone who definitely does know :-) 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]