Lucene search
+L

1 matches found

Hacker One
Hacker One
added 2016/12/18 4:31 p.m.34 views

shopify-scripts: Integer Overflow in mrb_ary_set

Hi, I found a crash in mruby. I frankly couldn't reproduce it in mruby-engine. I think it is because of memory limitation, but I'm not sure. Here is a PoC when the size of MRBINT is 32. ruby ary = Array.new0 ary0x7fffffff = 1 $ gdb -q --args ./bin/mruby ./test.rb Reading symbols from...

1.2AI score
SaveExploits0
Rows per page
Query Builder