Ruby Issue Tracking System

12/05/2018

12:07 PM Ruby Bug #15382 (Closed): Stack overflow in int_or()

After some fuzz testing I found a crashing test case.
To reproduce: miniruby ruby_so_int_or
Full ASAN report: https://gist.github.com/fumfel/0a2e01f2ab6794632d017bfd306ffac9
ASAN report:
~~~
==22120==ERROR: AddressSanitizer:... fumfel (Kamil Frankowicz)

08/22/2017

12:36 PM Ruby Bug #13836 (Closed): Null pointer dereference in defined_expr0()

After some fuzz testing I found a crashing test case.
To reproduce: miniruby ruby_null_ptr_defined_expr0
Context:
~~~
ruby_null_ptr_defined_expr0: [BUG] Segmentation fault at 0x0000000000000000
ruby 2.5.0dev (2017-08-03) [x86_... fumfel (Kamil Frankowicz)

07/20/2017

04:25 PM Ruby Bug #13760 (Closed): Another iseq_set_sequence: adjust bug 1 < 2

After some fuzz testing I found a crashing test case.
To reproduce: miniruby ruby_iseq_set_sequence
Context:
~~~
ruby_iseq_set_sequence:3: [BUG] iseq_set_sequence: adjust bug 1 < 2
ruby 2.5.0dev (2017-07-11 trunk 59311) [x86_6... fumfel (Kamil Frankowicz)

07/19/2017

10:17 AM Ruby Bug #13755 (Closed): Null pointer dereference in hash_table_index()

After some fuzz testing I found a crashing test case.
To reproduce: miniruby ruby_null_ptr_hash_table_index
Valgrind Context:
~~~
==945== Memcheck, a memory error detector
==945== Copyright (C) 2002-2015, and GNU GPL'd, by Jul... fumfel (Kamil Frankowicz)

07/13/2017

10:20 AM Ruby Bug #13742 (Closed): SIGSEGV in parser_yyerror()

After some fuzz testing I found a crashing test case.
To reproduce: miniruby ruby_sigsegv_parser_yyerror
Valgrind Context:
```
==20061== Memcheck, a memory error detector
==20061== Copyright (C) 2002-2017, and GNU GPL'd, by Ju... fumfel (Kamil Frankowicz)

02/25/2017

05:38 PM Ruby Bug #13242: SIGSEGV in rb_bigzero_p()

Nobuyoshi Nakada wrote:
> This is not vulnerability.
Right, I'm too fast ;-) fumfel (Kamil Frankowicz)

11:19 AM Ruby Bug #13253 (Closed): SIGSEGV in parser_heredoc_dedent()

After some fuzz testing I found a crashing test case.
Git HEAD: fbd5cda6aad6db01bbca3d893a9970314a1bd52c
To reproduce: miniruby ruby_parse.rb
fumfel (Kamil Frankowicz)

02/23/2017

02:34 PM Ruby Bug #13242: SIGSEGV in rb_bigzero_p()

~~This is CVE-2017-6212.~~ fumfel (Kamil Frankowicz)

02/22/2017

01:31 PM Ruby Bug #13242 (Closed): SIGSEGV in rb_bigzero_p()

After some fuzz testing I found a crashing test case.
Git HEAD: fbd5cda6aad6db01bbca3d893a9970314a1bd52c
To reproduce: miniruby ruby_rb_bigzero_p.rb
fumfel (Kamil Frankowicz)

09:49 AM Ruby Bug #13234: Infinite recursion (stack overflow) in parse_char_class()

This is CVE-2017-6181. fumfel (Kamil Frankowicz)