Skip to content

Commit

Permalink
trophies: update and add lists with issues
Browse files Browse the repository at this point in the history
Sync with Tarantool's trophies [1].

1. https://github.com/tarantool/tarantool/wiki/Fuzzing
  • Loading branch information
ligurio committed Jan 30, 2025
1 parent 68e6271 commit 2362054
Show file tree
Hide file tree
Showing 2 changed files with 15 additions and 2 deletions.
4 changes: 2 additions & 2 deletions CITATION.cff
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,8 @@ abstract: >-
It aims to make these open-source software more secure and
stable by combining modern fuzzing techniques with scalable,
distributed execution. As of August 2024, lua-c-api-tests has
helped identify and fix 5 bugs in PUC Rio Lua and 18 bugs in
LuaJIT.
helped identify and fix 5 bugs in PUC Rio Lua, 23 bugs in
LuaJIT, and 4 bugs in Tarantool.
type: software
repository-code: "https://github.com/ligurio/lua-c-api-tests"
keywords:
Expand Down
13 changes: 13 additions & 0 deletions TROPHIES.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,9 @@

### LuaJIT

1. ASSERT: `lj_obj_equal(tv, &tvk)`,
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57435,
https://github.com/LuaJIT/LuaJIT/issues/9
1. 0th register may be considered as `RID_NONE` in `asm_head_side`,
https://github.com/LuaJIT/LuaJIT/issues/1016,
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58555
Expand Down Expand Up @@ -60,6 +63,15 @@
1. Uninitialized read in `predict_next()`,
https://oss-fuzz.com/testcase-detail/5091141278564352
https://github.com/LuaJIT/LuaJIT/issues/1226
1. State is not restored during recording `__concat` metamethod in case of the OOM,
https://github.com/LuaJIT/LuaJIT/issues/1298,
https://issues.oss-fuzz.com/issues/372358472
1. Unsinking the table with `IRFL_TAB_NOMM` leads to the assertion failure,
https://github.com/LuaJIT/LuaJIT/issues/1052
1. Multi-concat recording doesn't handle vararg/protected frames,
https://github.com/LuaJIT/LuaJIT/issues/1164
1. Incorrect narrowing for huge numbers,
https://github.com/LuaJIT/LuaJIT/issues/1236

### Tarantool

Expand All @@ -78,3 +90,4 @@
1. https://www.lua.org/bugs.html
1. https://github.com/google/oss-fuzz-vulns/tree/main/vulns/lua
1. https://oss-fuzz.com/testcases?project=lua&open=yes
1. https://github.com/tarantool/tarantool/wiki/Fuzzing

0 comments on commit 2362054

Please sign in to comment.