diff options
| author | Oneric <oneric@oneric.stub> | 2022-07-05 21:11:15 +0200 |
|---|---|---|
| committer | Oneric <oneric@oneric.stub> | 2022-07-05 21:27:29 +0200 |
| commit | 7bc0c45dd58de6afa1800f8e8a94285e7535d68d (patch) | |
| tree | 42b934eeb6a15b19ee263ccae6239f8bd2fb0395 | |
| parent | fe851c83867270ff2f71b15741ef2b7812e4ce6d (diff) | |
| download | libass-7bc0c45dd58de6afa1800f8e8a94285e7535d68d.tar.bz2 libass-7bc0c45dd58de6afa1800f8e8a94285e7535d68d.tar.xz | |
fuzz/libfuzzer: reset handles after release
This bug slipped in before #622's merge with the change to fully
recreating renderer handles for AFL++ and led to use-after-free
bugs with libfuzzer whose callback gets invoked several times during
a process' lifetime. The other fuzzmodes are not affected.
| -rw-r--r-- | fuzz/fuzz.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/fuzz/fuzz.c b/fuzz/fuzz.c index d6fb926..a6f7323 100644 --- a/fuzz/fuzz.c +++ b/fuzz/fuzz.c @@ -298,6 +298,8 @@ int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) ass_renderer_done(ass_renderer); ass_library_done(ass_library); + ass_renderer = NULL; + ass_library = NULL; return 0; } |