shopify-scripts · Report #218567

SIGSEGV in array_copy - array.c:71

Validstatus

mediumseverity

$800bounty

2upvotes

13 Apr 2017disclosed

How it was found

File [2] as input causes a segfault in mruby.

mruby crashes in ary_copy (array.c:71):

Program received signal SIGSEGV, Segmentation fault.
0x000000000040e088 in array_copy (src=<optimized out>, size=<optimized out>, dst=<optimized out>) at /tmp/mruby/src/array.c:71
71          dst[i] = src[i];

Test platform: Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u1 x86_64 GNU/Linux

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original