[gnutls-devel] GnuTLS | memleak found by fuzz (#1071)

[Read-only notification of GnuTLS library development activities]

lutianxiong commented:


I also get some other ASAN/MSAN error reports while fuzzing gnutls_psk_client_fuzzer, like memleak、use-of-uninitialized-value, same reason as this issue.

session->key.proto is a union, clear session->key.proto.tls13 in read_server_hello will lead to overwrite of session->key.proto.tls12

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/issues/1071#note_399143575
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20200820/2ea71358/attachment.html>