]> granicus.if.org Git - php/commitdiff
Further reduce parse depth limit in mbstring fuzzer
authorNikita Popov <nikita.ppv@gmail.com>
Sat, 14 Dec 2019 21:42:05 +0000 (22:42 +0100)
committerNikita Popov <nikita.ppv@gmail.com>
Sat, 14 Dec 2019 21:43:15 +0000 (22:43 +0100)
Depth limit of 1024 still causes optimize_node stack overflows
when running under asan.

sapi/fuzzer/fuzzer-mbstring.c

index 5821024ec39a4b391a8f56c4020c0c08db679458..9c00761ad0aff95ceeb3531fb47e9c28ebbdc696 100644 (file)
@@ -69,7 +69,7 @@ int LLVMFuzzerInitialize(int *argc, char ***argv) {
        fuzzer_init_php();
 
        /* The default parse depth limit allows stack overflows under asan. */
-       onig_set_parse_depth_limit(1024);
+       onig_set_parse_depth_limit(512);
 
        /* fuzzer_shutdown_php(); */
        return 0;