Comments (5)
commented on April 28, 2024
I have tested the reproducing test case and it does trigger the crash between v19.0.0a4 and v19.0.0a5, so the version range of v19 up to latest v20.8 is wrong.
from oss-fuzz-vulns.
oliverchang
commented on April 28, 2024
Sorry for the inaccuracy here. Our list of affected versions are automatically determined from the introduced and fixed commits. Our automation infra based it off uNetworking/uWebSockets@4e4fd20, which causes confusion because it no longer exists.
Would you be able to help point to the actual fix commit for this?
from oss-fuzz-vulns.
commented on April 28, 2024
No problem, I can go through them and find the real fix
from oss-fuzz-vulns.
commented on April 28, 2024
Fix is uNetworking/uWebSockets@1507f3f
Offender is uNetworking/uWebSockets@7b330e9
from oss-fuzz-vulns.
oliverchang
commented on April 28, 2024
Thanks a bunch @alexhultman ! I updated this in bac99b4
from oss-fuzz-vulns.
Related Issues (11)
- [matio] How to fix/remove 2021-440? HOT 3
- Fixing commit from OSV-2021-237 seems wrong HOT 2
- Code of the automated bisection HOT 1
- OSV-2021-1549 fix commit is incorrect HOT 1
- False Positive on arrow vs. pyarrow HOT 2
- `scripts/import.py` fails to extract package names
- Removing entries HOT 1
- OSV-2017-16.yaml is missing introduced & fixed attributes HOT 1
- OSV-2020-2324.yaml has incorrect introduced & fixed attributes HOT 2
- OSV-2021-557.yaml has incorrect fixed attribute HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oss-fuzz-vulns.