Hacker News new | ask | show | jobs
by d33 3070 days ago
Why wasn't it found with afl-fuzz?
2 comments

The RAR PPMd bug can only be triggered if many conditions are satisfied. For example, the RAR archive needs to be mostly correctly structured, and needs to have at least two items that are compressed with the right flags (e.g., RAR version 3, PPMd). Furthermore, the compressed streams need to be constructed such that the bugs are triggered. Hence, I believe the bug is difficult to hit with straightforward coverage-guided fuzzing.
Because AFL does not find every path-execution-based vulnerability?