|
17 | 17 |
|
18 | 18 | ### LuaJIT |
19 | 19 |
|
| 20 | +1. ASSERT: `lj_obj_equal(tv, &tvk)`, |
| 21 | + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57435, |
| 22 | + https://github.com/LuaJIT/LuaJIT/issues/9 |
20 | 23 | 1. 0th register may be considered as `RID_NONE` in `asm_head_side`, |
21 | 24 | https://github.com/LuaJIT/LuaJIT/issues/1016, |
22 | 25 | https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58555 |
|
60 | 63 | 1. Uninitialized read in `predict_next()`, |
61 | 64 | https://oss-fuzz.com/testcase-detail/5091141278564352 |
62 | 65 | https://github.com/LuaJIT/LuaJIT/issues/1226 |
| 66 | +1. State is not restored during recording `__concat` metamethod in case of the OOM, |
| 67 | + https://github.com/LuaJIT/LuaJIT/issues/1298, |
| 68 | + https://issues.oss-fuzz.com/issues/372358472 |
| 69 | +1. Unsinking the table with `IRFL_TAB_NOMM` leads to the assertion failure, |
| 70 | + https://github.com/LuaJIT/LuaJIT/issues/1052 |
| 71 | +1. Multi-concat recording doesn't handle vararg/protected frames, |
| 72 | + https://github.com/LuaJIT/LuaJIT/issues/1164 |
| 73 | +1. Incorrect narrowing for huge numbers, |
| 74 | + https://github.com/LuaJIT/LuaJIT/issues/1236 |
63 | 75 |
|
64 | 76 | ### Tarantool |
65 | 77 |
|
|
78 | 90 | 1. https://www.lua.org/bugs.html |
79 | 91 | 1. https://github.com/google/oss-fuzz-vulns/tree/main/vulns/lua |
80 | 92 | 1. https://oss-fuzz.com/testcases?project=lua&open=yes |
| 93 | +1. https://github.com/tarantool/tarantool/wiki/Fuzzing |
0 commit comments