You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi I build d8 version 8.0.0 and and try an old poc that crash the d8 with Trace/breakpoint trap (core dumped) message, but when I use honggfuzz with the same d8 and same poc, it dose not gave me any crashes.
my build process for d8 is as follow
and this poc should crash the d8 with Trace/breakpoint trap (core dumped) output when we run it with this command ./d8 poc.js
function write(begin, end, step) {
for (var i = begin; i >= end; i += step) {
step = end - begin;
begin >>>= 805306382;
}
}
var buffer = new ArrayBuffer(16384);
var view = new Uint32Array(buffer);
for (let i = 0; i < 10000; i++) {
write(Infinity, 1, view[65536], 1);
}
and this is honggfuzz command to run it with d8 which is not works as expected
Hi I build d8 version 8.0.0 and and try an old poc that crash the d8 with
Trace/breakpoint trap (core dumped)
message, but when I use honggfuzz with the same d8 and same poc, it dose not gave me any crashes.my build process for d8 is as follow
and this poc should crash the d8 with
Trace/breakpoint trap (core dumped)
output when we run it with this command./d8 poc.js
and this is honggfuzz command to run it with d8 which is not works as expected
is what I did right? or I missed something?
The text was updated successfully, but these errors were encountered: