Lucene search

K
ossfuzzGoogleOSSFUZZ-1640
HistoryMay 16, 2017 - 9:55 a.m.

gnutls: Use-of-uninitialized-value in wrap_nettle_pk_fixup

2017-05-1609:55:55
Google
bugs.chromium.org
4

Project:
https://gitlab.com/gnutls/gnutls.git

Detailed report: https://oss-fuzz.com/testcase?key=6563561801252864

Project: gnutls
Fuzzer: libFuzzer_gnutls_pkcs12_key_parser_fuzzer
Fuzz target binary: gnutls_pkcs12_key_parser_fuzzer
Job Type: libfuzzer_msan_gnutls
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address:
Crash State:
wrap_nettle_pk_fixup
_gnutls_pk_fixup
gnutls_x509_privkey_import_pkcs8

Sanitizer: memory (MSAN)

Recommended Security Severity: Medium

Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_msan_gnutls&range=201705081839:201705091619

Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=6563561801252864

Issue filed automatically.

See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.