Open
Description
- Note that this crate implements the URL Standard not RFC 1738 or RFC 3986
Describe the bug
I performed fuzzing for rust-url using afl.rs in the following way.
cargo new --bin url-fuzz-target
cd url-fuzz-target
cargo afl build
While performing fuzzing, I discovered a bug where the input generated by the fuzzer caused a very long parse times, preventing the program from terminating.
I reproduced this process as follows.
(1) unzip the attached poc.zip
(2) run
cargo afl run url-fuzz-target < ./id:000000,src:002523,time:11346358,execs:197688102,op:havoc,rep:1
Then the program will not terminate as follows.
Metadata
Metadata
Assignees
Labels
No labels