[Bug libstdc++/79135] null pointer dereference in std::_Bit_reference::operator=(bool) (stl_bvector.h:87)

2017-05-09 Thread brian.carpenter at gmail dot com
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79135 Brian 'geeknik' Carpenter changed: What|Removed |Added Status|WAITING |RESOLVED

[Bug libstdc++/79136] read outside of buffer in char* std::__copy_move<false, false, std::random_access_iterator_tag>::__copy_m(unsigned char const*, unsigned char const*,

2017-05-09 Thread brian.carpenter at gmail dot com
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79136 Brian 'geeknik' Carpenter changed: What|Removed |Added Status|WAITING |RESOLVED

[Bug libstdc++/79136] New: read outside of buffer in char* std::__copy_move<false, false, std::random_access_iterator_tag>::__copy_m(unsigned char const*, unsigned char co

2017-01-18 Thread brian.carpenter at gmail dot com
signed char const*, char*) (stl_algobase.h) Product: gcc Version: 6.2.1 Status: UNCONFIRMED Severity: normal Priority: P3 Component: libstdc++ Assignee: unassigned at gcc dot gnu.org Reporter: brian.carpenter at gmail d

[Bug libstdc++/79135] New: null pointer dereference in std::_Bit_reference::operator=(bool) (stl_bvector.h:87)

2017-01-18 Thread brian.carpenter at gmail dot com
: UNCONFIRMED Severity: normal Priority: P3 Component: libstdc++ Assignee: unassigned at gcc dot gnu.org Reporter: brian.carpenter at gmail dot com Target Milestone: --- Created attachment 40538 --> https://gcc.gnu.org/bugzilla/attachment.cgi?id=40

[Bug c++/67394] New: crash due to null pointer deref in demangle_signature()

2015-08-29 Thread brian.carpenter at gmail dot com
Priority: P3 Component: c++ Assignee: unassigned at gcc dot gnu.org Reporter: brian.carpenter at gmail dot com Target Milestone: --- While fuzzing binutils/cxxfilt with AFL (http://lcamtuf.coredump.cx/afl/), I discovered a crash due to a null ptr deref

[Bug c++/67393] New: segfault in cxxfilt in d_unqualified_name () at ./cp-demangle.c:1547

2015-08-29 Thread brian.carpenter at gmail dot com
Priority: P3 Component: c++ Assignee: unassigned at gcc dot gnu.org Reporter: brian.carpenter at gmail dot com Target Milestone: --- I was fuzzing binutils/cxxfilt with AFL (http://lcamtuf.coredump.cx/afl/) and came across a crash and was told