[gnutls-devel] libtasn1 | Detecting Bug in libtasn1-4.12 by fuzzing. (#4)

[Development of GNU's TLS library]

New Issue was created.

Issue 4: https://gitlab.com/gnutls/libtasn1/issues/4
Author:    stuartly
Assignee:  

## Description of problem:

program was Killed when running asn1Parser to process a file.



## Version of libtasn1 used:  

libtasn1-4.12


## Distributor of libtasn1 (e.g., Ubuntu, Fedora, RHEL)

Ubuntu

## How reproducible:

Steps to Reproduce:

 * intall libtasn1-4.12 
 * ./asn1Parser -c  id\:000000\,sig\:11\,src\:000721\,op\:havoc\,rep\:2

 Note that: id\:000000\,sig\:11\,src\:000721\,op\:havoc\,rep\:2 is in the attachment named Bug1-POC
 

## Expected results:

stly at ubuntu:~/Documents/TargetFuzz/Benchmark/libtasn1-4.12/out-AFL-Org$ ../installed-Org/bin/asn1Parser -c crashes/id\:000000\,sig\:11\,src\:000721\,op\:havoc\,rep\:2
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:23: Warning: UniversalString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:56: Warning: VisibleString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:58: Warning: NumericString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:60: Warning: IA5String is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:62: Warning: TeletexString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:64: Warning: PrintableString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:66: Warning: UniversalString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:92: Warning: VisibleString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:94: Warning: NumericString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:96: Warning: IA5String is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:98: Warning: TeletexString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:100: Warning: PrintableString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:102: Warning: UniversalString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:105: Warning: BMPString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:126: Warning: VisibleString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:128: Warning: NumericString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:130: Warning: IA5String is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:132: Warning: TeletexString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:134: Warning: PrintableString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:136: Warning: UniversalString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:163: Warning: VisibleString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:165: Warning: NumericString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:167: Warning: IA5String is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:169: Warning: TeletexString is a built-in ASN.1 type.
crashes/id:000000,sig:11,src:000721,op:havoc,rep:2:171: Warning: PrintableString is a built-in ASN.1 type.
Killed


[Bug1-POC](/uploads/2fbc7e6c00ea8da8c5c6538d5b39ef81/Bug1-POC)

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/libtasn1/issues/4
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20180812/698a7189/attachment.html>