Skip to content

Conversation

@drawks
Copy link
Contributor

@drawks drawks commented Aug 19, 2015

No description provided.

Dave Rawks added 3 commits August 19, 2015 14:09
Added a guarding defer to catch panics in protocol 0 and 1

- Protocol 0 guard added to opcode_DICT and opcode_SETITEM
- Protocol 1 guard added to opcode_SETITEMS
@dvyukov
Copy link

dvyukov commented Aug 20, 2015

Hi,

It can make sense to extend the Fuzz function to Unpickle, Pickle and then Unpickle again. You can also check that Pickle and second Unpickle do not fail, and also that results of Unpickle's are equal. See for example:
https://github.com/dvyukov/go-fuzz/blob/master/examples/xml/xml.go

@hydrogen18
Copy link
Owner

I'll review these soon.

@drawks
Copy link
Contributor Author

drawks commented Sep 17, 2015

Any word on when this might get merged? Code changes are pretty simple and definitely guard against reproducible panics...

hydrogen18 added a commit that referenced this pull request Nov 2, 2015
Fix crashers found via fuzzing
@hydrogen18 hydrogen18 merged commit 9b38526 into hydrogen18:master Nov 2, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants