[Python-Dev] Fuzzing bugs: most bugs are closed (original) (raw)
Victor Stinner victor.stinner at haypocalc.com
Sun Jul 20 22:45:39 CEST 2008
- Previous message: [Python-Dev] Search broken on the python dev docs?
- Next message: [Python-Dev] Fuzzing bugs: most bugs are closed
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Le Saturday 19 July 2008 21:52:09 A.M. Kuchling, vous avez écrit :
Excellent work! Another fruitful area for fuzzing might be the miniature virtual machine used by the re module. It's possible to import sre and call the compile() function directly (see the end of Lib/srecompile.py for how it's invoked); I wonder how the regex VM copes with random strings of bytecode.
Hum... how can I say it? It's trivial to crash _sre :-) So I blacklisted _sre.compile() in my fuzzer.
For information, it's also very easy to crash CPython with fuzzed .pyc file.
It's hard to check bytecode without execute it. It's maybe better to add checks directly in the VM.
-- Victor Stinner aka haypo http://www.haypocalc.com/blog/
- Previous message: [Python-Dev] Search broken on the python dev docs?
- Next message: [Python-Dev] Fuzzing bugs: most bugs are closed
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]