shopify-scripts · Report #201903
Segmentfault at mrb_vm_exec
Validstatus
mediumseverity
$100bounty
3upvotes
28 Feb 2017disclosed
Summary
@ssarong discovered an integer overflow in MRuby's code generator, which resulted in a crash. The issue was reported upstream in https://github.com/mruby/mruby/issues/3426 and fixed in https://github.com/mruby/mruby/commit/6e0ba0085d22b7751c46b178e841046483f0f6b4.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.