Public examples of fuzzing related work that I've done

---

• CVE-2017-5193, CVE-2017-5195, CVE-2017-5196 - Three CVEs in irssi - https://irssi.org/security/irssi_sa_2017_01.txt
• binutils bug #20794 - Heap buffer overflow in readelf - https://sourceware.org/bugzilla/show_bug.cgi?id=20794
• irssi bug #563 - Segfault caused by config file - https://github.com/irssi/irssi/issues/563 - http://josephbisch.com/post/2016-10-30-irssi-bug-563/
• irssi bug #564 - Segfault in config_node_first at get.c:330 - https://github.com/irssi/irssi/issues/564
• Finding a bug in SQLite by fuzzing osquery - http://josephbisch.com/post/2016-12-02-finding-a-bug-in-sqlite-by-fuzzing-osquery/
• Add frontend for fuzzing to irssi - https://github.com/irssi/irssi/pull/610
• Linux kernel BUG at fs/direct-io.c:211! in next-20160930 - https://www.spinics.net/lists/linux-fsdevel/msg102630.html
• Out of bounds read in handle_dot_label in yasm - https://tortall.lighthouseapp.com/projects/78676/tickets/305-oob-read-in-handle_dot_label#ticket-305-1