john-dev - List of bugs found by fuzzing and manual review

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CABtNtWELkgXKJsK6Pqgf5FuZjgdnYuKLkBrfeE3CnJLCT1AF-w@mail.gmail.com>
Date: Fri, 27 Mar 2015 01:05:32 +0800
From: Kai Zhao <loverszhao@...il.com>
To: john-dev@...ts.openwall.com
Subject: List of bugs found by fuzzing and manual review

Hi all,

This is a list of bugs I have found by fuzzing and manual review.

Fuzzing
-------------
I use AFL with asan found several bugs. Also, I wrote a simple tools to
fuzz command-line options which found several bugs.

Manual review
--------------------
I mainly review valid() functions in *_fmt_plug.c which have many problems.


Here is my pull request:

https://github.com/magnumripper/JohnTheRipper/pulls?utf8=%E2%9C%93&q=is%3Apr+author%3Aloverszhaokai+

Here is my issues:

https://github.com/magnumripper/JohnTheRipper/issues?utf8=%E2%9C%93&q=is%3Aissue+author%3Aloverszhaokai+



Thanks for your time,

Kai

Content of type "text/html" skipped

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.