diff options
author | vanhauser-thc <vh@thc.org> | 2021-07-07 12:19:05 +0200 |
---|---|---|
committer | vanhauser-thc <vh@thc.org> | 2021-07-07 12:19:05 +0200 |
commit | f1bcd378a2e55ee1559dde0d46e2bc32882c5b39 (patch) | |
tree | c75979db5699bceb6184cf361662affe224dd736 /instrumentation/SanitizerCoverageLTO.so.cc | |
parent | 405382cbddea8b99543c3fddcaa5738b1ed3ade3 (diff) | |
download | afl++-f1bcd378a2e55ee1559dde0d46e2bc32882c5b39.tar.gz |
fix failures for some sized string instrumentations
Diffstat (limited to 'instrumentation/SanitizerCoverageLTO.so.cc')
-rw-r--r-- | instrumentation/SanitizerCoverageLTO.so.cc | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/instrumentation/SanitizerCoverageLTO.so.cc b/instrumentation/SanitizerCoverageLTO.so.cc index 372af003..28eb0b9f 100644 --- a/instrumentation/SanitizerCoverageLTO.so.cc +++ b/instrumentation/SanitizerCoverageLTO.so.cc @@ -759,6 +759,12 @@ bool ModuleSanitizerCoverage::instrumentModule( uint64_t literalLength = Str2.size(); uint64_t optLength = ilen->getZExtValue(); + if (optLength > literalLength + 1) { + + optLength = Str2.length() + 1; + + } + if (literalLength + 1 == optLength) { Str2.append("\0", 1); // add null byte @@ -862,6 +868,12 @@ bool ModuleSanitizerCoverage::instrumentModule( uint64_t literalLength = optLen; optLen = ilen->getZExtValue(); + if (optLen > thestring.length() + 1) { + + optLen = thestring.length() + 1; + + } + if (optLen < 2) { continue; } if (literalLength + 1 == optLen) { // add null byte thestring.append("\0", 1); |