TROPHIES.md

Trophies

Sydr-fuzz discovered 172 new bugs in 30 open source projects.

• audk:
  • https://github.com/acidanthera/audk/commit/7da674d1c923b52013bd108f82211b1561880c55
• Cairo:
  • https://gitlab.freedesktop.org/cairo/cairo/-/issues/579
• edk2:
  • https://github.com/tianocore/edk2/commit/35043a5ec05db6aa86b1b380416923fd1c3506e6
• edk2-platforms:
  • https://github.com/tianocore/edk2-platforms/commit/4d960003ca35dc4af756c0a38e83b68630a42a90
  • https://github.com/tianocore/edk2-platforms/commit/22416dc7a93e39fa4e047ce59f6507e33c895d86
  • https://github.com/tianocore/edk2-platforms/commit/0bea20a53a77ad8c844d6021ccd789dc2d6f369c
  • https://github.com/tianocore/edk2-platforms/commit/d99e1597f899b397aaa8953180cf15a77954918e
  • https://github.com/tianocore/edk2-platforms/commit/977ed7c49933f64fea84ca7c59b4dbf3a33c3420
  • https://github.com/tianocore/edk2-platforms/commit/127af2995941808c6b7e8778a62171a8e5184bd5
  • https://github.com/tianocore/edk2-platforms/commit/92065decc87e531c1701b6dd413fb52ef99a5b43
  • https://github.com/tianocore/edk2-platforms/commit/d0cd979906f1645a6277bde0aeddc7303c9a1b46
  • https://github.com/tianocore/edk2-platforms/commit/dc30a6213115d15a58cb2a967f0df3f48704f890
  • https://github.com/tianocore/edk2-platforms/commit/1f5c4f7cab506e800b13ecd1898bcc13df5d524d
  • https://github.com/tianocore/edk2-platforms/commit/0af4ed52a2e605761b4bcfdb3f10e5a8d9685931
  • https://github.com/tianocore/edk2-platforms/commit/615afc82db9f3ff348dacf8a94d9bb588783964b
  • https://github.com/tianocore/edk2-platforms/commit/878c4b13fb2fabd07c5db29ae465aeb2177ce744
• exrs:
  • johannesvollmer/exrs#166
• FFmpeg (torchvision 3rdparty):
  • https://patchwork.ffmpeg.org/project/ffmpeg/patch/[email protected]/
  • https://patchwork.ffmpeg.org/project/ffmpeg/patch/[email protected]/
• FreeImage:
  • https://sourceforge.net/p/freeimage/bugs/343/
  • https://sourceforge.net/p/freeimage/bugs/344/
  • https://sourceforge.net/p/freeimage/bugs/345/
  • https://sourceforge.net/p/freeimage/bugs/347/
  • https://sourceforge.net/p/freeimage/bugs/348/
  • https://sourceforge.net/p/freeimage/bugs/349/
  • https://sourceforge.net/p/freeimage/bugs/350/
  • https://sourceforge.net/p/freeimage/bugs/351/
  • https://sourceforge.net/p/freeimage/patches/158/
• goblin:
  • m4b/goblin#328
  • m4b/goblin#329
  • m4b/goblin#330
  • m4b/goblin#332
  • m4b/goblin#333
  • m4b/goblin#368
• golang/image
  • golang/image#14
• hdf5:
  • HDFGroup/hdf5#2432 (PR: HDFGroup/hdf5#2691)
• ICU (Node.js dependency):
  • nodejs/node#45297 (PR: unicode-org/icu#2248)
  • https://unicode-org.atlassian.net/browse/ICU-22235
• image-rs:
  • image-rs/image#1778 (PR: image-rs/image#1781)
  • image-rs/image-tiff#200
  • image-rs/image#1854
• libpcap:
  • the-tcpdump-group/libpcap#1134
  • the-tcpdump-group/libpcap#1205
  • the-tcpdump-group/libpcap#1206
• libtiff (OpenCV 3rdparty):
  • https://gitlab.com/libtiff/libtiff/-/merge_requests/512
• Little-CMS:
  • mm2/Little-CMS#329
  • mm2/Little-CMS#331
  • mm2/Little-CMS#333
  • mm2/Little-CMS#376
• miniz:
  • richgel999/miniz#238
• miniz-2.0.8 (pytorch third_party):
  • pytorch/pytorch#74798
• msgspec:
  • jcrist/msgspec#366
• nDPI:
  • ntop/nDPI#1803
  • ntop/nDPI#1980
  • ntop/nDPI#1998
  • ntop/nDPI#1999
  • ntop/nDPI#2005
  • ntop/nDPI#2032
  • ntop/nDPI#2033
  • ntop/nDPI#2034
• OpenJPEG (OpenCV 3rdparty):
  • opencv/opencv#22284
  • uclouvain/openjpeg#1488
  • uclouvain/openjpeg#1489
  • uclouvain/openjpeg#1490
  • uclouvain/openjpeg#1491
  • uclouvain/openjpeg#1492
  • uclouvain/openjpeg#1530
• OpenXLSX:
  • troldal/OpenXLSX#140
  • troldal/OpenXLSX#139
• pypdf (langchain 3rdparty):
  • langchain-ai/langchain#24439
  • py-pdf/pypdf#2815
  • py-pdf/pypdf#2817
  • py-pdf/pypdf#2843
  • py-pdf/pypdf#2866
  • py-pdf/pypdf#2875
• Poppler:
  • https://gitlab.freedesktop.org/poppler/poppler/-/issues/1268
  • https://gitlab.freedesktop.org/poppler/poppler/-/issues/1269 (PR)
• PyTorch:
  • pytorch/pytorch#77561 (PR)
  • pytorch/pytorch#77563 (PR)
  • pytorch/pytorch#77573 (PR)
  • pytorch/pytorch#77575 (PR)
  • pytorch/pytorch#77557
  • pytorch/pytorch#94815
  • pytorch/pytorch#91401
  • pytorch/pytorch#94295
  • pytorch/pytorch#94297
  • pytorch/pytorch#103327
  • pytorch/pytorch#94300
  • pytorch/pytorch#95061 (PR)
  • pytorch/pytorch#95062 (PR)
  • pytorch/pytorch#102156
  • pytorch/pytorch#105537
  • pytorch/pytorch#103667
  • pytorch/pytorch#103969
  • pytorch/pytorch#104044
  • pytorch/pytorch#104243
  • pytorch/pytorch#106041
  • pytorch/pytorch#108413
  • pytorch/pytorch#108414
  • pytorch/pytorch#108417
  • pytorch/pytorch#108418
  • pytorch/pytorch#109794
  • pytorch/pytorch#127404 (PR)
  • pytorch/pytorch#127405 (PR)
  • pytorch/pytorch#127406 (PR)
  • pytorch/pytorch#127407 (PR)
  • pytorch/pytorch#127408 (PR)
  • pytorch/pytorch#127409 (PR)
  • pytorch/pytorch#127410 (PR)
  • pytorch/pytorch#127411 (PR)
  • pytorch/pytorch#127437
  • pytorch/pytorch#127526
• Rizin:
  • rizinorg/rizin@6b118bf (PR: rizinorg/rizin#2930)
  • rizinorg/rizin@eb7e0ef (PR: rizinorg/rizin#2930)
  • CVE-2022-36044 (rizinorg/rizin@05bbd14, PR: rizinorg/rizin#2930)
  • rizinorg/rizin@e5ad689 (PR: rizinorg/rizin#2930)
  • rizinorg/rizin@0e86b74 (PR: rizinorg/rizin#2930)
  • CVE-2022-36042 (rizinorg/rizin@556ca2f, radareorg/radare2@a665f7f, PR: rizinorg/rizin#2930)
  • rizinorg/rizin@d4134cb (PR: rizinorg/rizin#2930)
  • rizinorg/rizin#2935
  • rizinorg/rizin#2936
  • rizinorg/rizin#2952
  • rizinorg/rizin#2953
  • rizinorg/rizin#2954
  • rizinorg/rizin#2955
  • CVE-2022-36041 (rizinorg/rizin#2956)
  • rizinorg/rizin#2957
  • rizinorg/rizin#2958
  • rizinorg/rizin#2959
  • rizinorg/rizin#2960
  • rizinorg/rizin#2961
  • rizinorg/rizin#2962
  • CVE-2022-36040 (rizinorg/rizin#2963)
  • CVE-2022-36043 (rizinorg/rizin#2964)
  • rizinorg/rizin#2965
  • rizinorg/rizin#2966
  • rizinorg/rizin#2967
  • rizinorg/rizin#2968
  • CVE-2022-36039 (rizinorg/rizin#2969)
  • rizinorg/rizin#2970
  • rizinorg/rizin#2971
  • rizinorg/rizin#2972
  • rizinorg/rizin#2973
  • rizinorg/rizin#2974
  • rizinorg/rizin#3031
  • rizinorg/rizin#3032
  • rizinorg/rizin#3128
• SoX (torchaudio 3rdparty):
  • https://sourceforge.net/p/sox/patches/126/
  • https://sourceforge.net/p/sox/patches/127/
  • https://sourceforge.net/p/sox/patches/128/
• Tarantool:
  • tarantool/tarantool#6614
  • tarantool/tarantool#6662
  • tarantool/tarantool#8640
• TensorFlow:
  • tensorflow/tensorflow#56455
  • tensorflow/tensorflow#60082
  • tensorflow/tensorflow#60933
  • tensorflow/tensorflow#61913
  • tensorflow/tensorflow#62356
• Torchvision:
  • pytorch/vision#6456
  • pytorch/vision#7691
  • https://github.com/pytorch/vision/issues/7936
• unbound:
  • NLnetLabs/unbound#637
  • NLnetLabs/unbound#909
• xlnt:
  • tfussell/xlnt#592
  • tfussell/xlnt#593
  • tfussell/xlnt#594
  • tfussell/xlnt#595
  • tfussell/xlnt#596
  • tfussell/xlnt#597
  • tfussell/xlnt#598
  • tfussell/xlnt#616
  • tfussell/xlnt#626