Skip to content

Conversation

@lewismosciski
Copy link
Contributor

This PR adds an advisory for a soundness issue in libafl_bolts.

Summary

The safe functions covmap_is_interesting_simd and covmap_is_interesting_naive can cause undefined behavior through out-of-bounds memory access.

Details

  • Vulnerability: Use get_unchecked on hist slice with indices from map slice
  • Impact: Out-of-bounds access when hist.len() < map.len(), causing undefined behavior
  • Status: ✅ Fixed in main branch, awaiting release
  • Fix: Functions marked as unsafe with safety documentation

Safe functions use get_unchecked with unchecked lengths. Fix merged but not yet released.
@lewismosciski
Copy link
Contributor Author

Hi @domenukk,

Per RustSec policy, could you please confirm you're okay with publishing this advisory for the soundness issue AFLplusplus/LibAFL#3417?

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant