Out of bounds heap bugs in glib, heap buffer overflow in gnome-session

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

By testing GNOME-related packages with Address Sanitizer I recently discovered several trivial to find bugs. Two out of bounds bugs in the glib library were uncovered by running the test suite with Address Sanitizer enabled. One heap buffer overflow in the parameter parsing of gnome-session was uncovered by trying to start GNOME. Given that these bugs weren't discovered earlier means that most…

Read on blog.fuzzing-project.org ↗