binutils:fuzz_as: Heap-use-after-free in _obstack_free

Detailed Report: https://oss-fuzz.com/testcase?key=5725912579833856 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzas Job Type: libfuzzerasanbinutils Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x62100003c108 Crash State: obstackfree xatexitcleanup xexit...

CVE-2020-24240

GNU Bison before 3.7.1 has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug...

Use After Free

GNU Bison has a use-after-free in obstackfree in lib/obstack.c called from gramlex when a '\0' byte is encountered. NOTE: there is a risk only if Bison is used with untrusted input, and the observed bug happens to cause unsafe behavior with a specific compiler/architecture. The bug report was...