Replying to this email means your email address will be shared with the team that works on this product. https://issues.oss-fuzz.com/issues/481932457
Changed [email protected] added comment #7:
Sincere apologies for the mixup with the mailing list.
Shit happens. No worries.
Is there another one we should use for security-relevant issues? Or just
remove it completely? Direct to me is best. Until I stop answering, then ask on gpsd-dev for a new contact. Confidential GitLab issues to to myself and the other right peole.
Could you please attribute the patch to:
Done, uploaded to git head. I'll add my patch Saturday. Odd, your code link does not match the one in the detailed report. How do I know they are the same? Your link: https://github.com/AdaLogics/ada-fuzzers/blob/main/projects/gpsd/fuzzer/FuzzDrivers.c But the report here: https://oss-fuzz.com/testcase-detail/4649384745959424 Says: #1 0x5591bde344d9 in LLVMFuzzerTestOneInput gpsd/fuzzer/FuzzDrivers.c:106:30 And that link is: https://gitlab.com/gpsd/gpsd/-/tree/50153e3ea7c85158c2cd4c84a1579f95de24ff31#L106 which says: "fuzzer/FuzzDrivers.c" did not exist on "50153e3ea7c85158c2cd4c84a1579f95de24ff31" Can that get fixed? Other that getting the report fixed, and my TODO patch, this is resolved for me. Thanks for the followup. All good in the end. _______________________________ Reference Info: 481932457 gpsd:FuzzDrivers: Crash in gpsd_poll component: Public Trackers > 1362134 > OSS Fuzz status: New reporter: [email protected] cc: [email protected], [email protected], [email protected], and 3 more collaborators: [email protected] type: Vulnerability access level: Limited visibility priority: P2 severity: S2 hotlist: Reproducible, Stability-Memory-MemorySanitizer retention: Component default Disclosure: May 6, 2026 Project: gpsd Reported: Feb 5, 2026 Generated by Google IssueTracker notification system.
