Re: Found heap-buffer-overflow with grammar-based fuzzer

[Roberto Ierusalimschy <roberto@...>]

> at first, I couldn't reproduce the bug when I copied it from the email. So I guess there must be a particular byte-sequence present in the file to trigger it. When I used the original file (see attachment), however, it worked.

A crucial part of the example is the operation that changes the binary
dump:

  [...].gsub ([[	]], ""))

In the original file, the literal string contains an escape, which was
replaced by spaces in the message you sent first.

-- Roberto