From 9bc38ce3d0ffe32e6062f099f8cc131cea65bf2e Mon Sep 17 00:00:00 2001 From: Sergey Bronnikov Date: Sat, 17 May 2025 20:28:36 +0300 Subject: [PATCH] trophies: update PUC Rio Lua and LuaJIT issues --- CITATION.cff | 4 ++-- TROPHIES.md | 15 +++++++++++++-- 2 files changed, 15 insertions(+), 4 deletions(-) diff --git a/CITATION.cff b/CITATION.cff index d8fe327..7782d2d 100644 --- a/CITATION.cff +++ b/CITATION.cff @@ -14,8 +14,8 @@ abstract: >- continuous fuzzing for Lua runtimes: PUC Rio Lua and LuaJIT. It aims to make these open-source software more secure and stable by combining modern fuzzing techniques with scalable, - distributed execution. As of April 2025, the project has - helped identify and fix 5 bugs in PUC Rio Lua, 26 bugs in + distributed execution. As of July 2025, the project has + helped identify and fix 7 bugs in PUC Rio Lua, 27 bugs in LuaJIT, and 6 bugs in Tarantool. type: software repository-code: "https://github.com/ligurio/lua-c-api-tests" diff --git a/TROPHIES.md b/TROPHIES.md index 9add9e0..1e1feb9 100644 --- a/TROPHIES.md +++ b/TROPHIES.md @@ -20,6 +20,10 @@ https://groups.google.com/g/lua-l/c/CCpPLX1ug3A, https://oss-fuzz.com/testcase-detail/6073198411579392, https://github.com/lua/lua/commit/f9e35627ed26dff4114a1d01ff113d8b4cc91ab5 +1. UBsan: member access within null pointer of type 'struct TString', + https://groups.google.com/g/lua-l/c/Kng6FGlPjmc, + https://github.com/lua/lua/commit/6d53701c7a0dc4736d824fd891ee6f22265d0d68, + https://oss-fuzz.com/testcase-detail/5557969930747904 ### LuaJIT @@ -81,9 +85,16 @@ 1. Assertion failure when flushing already flushed trace, https://github.com/LuaJIT/LuaJIT/issues/1345 1. Read from already collected string data in case of the error in loadfile, - https://github.com/LuaJIT/LuaJIT/issues/1353 + https://github.com/LuaJIT/LuaJIT/issues/1353, + https://github.com/tarantool/security/issues/144, + https://issues.oss-fuzz.com/issues/407592872 1. JIT slots overflow for side-trace after up-recursion, - https://github.com/LuaJIT/LuaJIT/issues/1358 + https://github.com/LuaJIT/LuaJIT/issues/1358, + https://github.com/tarantool/security/issues/145 +1. Stack overflow in error handler during stack overflow, + https://github.com/LuaJIT/LuaJIT/issues/1152, + https://issues.oss-fuzz.com/issues/394126186, + https://github.com/tarantool/security/issues/143 ### Tarantool