Segfault due to null pointer dereference about context-free HOT 5 CLOSED

Absolutely, file those issues. I'm working on a new release and I would like to fix any bugs that you find. It is always poor form to crash, regardless of security context.

from context-free.

I found an assertion that turns out not to be true for this particular case of poorly formed cfdg code. I'm replacing it with a runtime check. It will be fixed in the next release.

from context-free.

As an aside, I'm fuzzing contextfree for fun and I've found several bugs like these which either segfault or trigger assertions (with syntax that should probably be caught as invalid). I don't suppose contextfree will be run in a security-sensitive context often, but they're still bugs and I'd be happy to open issues for them. However, I don't want to bother you if you don't consider those interesting. Are you interested?

from context-free.

Agreed, will do.

from context-free.

I fixed your three new issues and then I inspected some files and fixed several possible null pointer references. If you do any more fuzzing then please fetch these changes. Thanks.

from context-free.