Skip to content

ppcdisasm: fix 3 bugs caught by fuzzing#165

Merged
dingusdev merged 1 commit intodingusdev:masterfrom
jarz:ppcdisasm-fuzzing-bugs
Feb 13, 2026
Merged

ppcdisasm: fix 3 bugs caught by fuzzing#165
dingusdev merged 1 commit intodingusdev:masterfrom
jarz:ppcdisasm-fuzzing-bugs

Conversation

@jarz
Copy link
Copy Markdown
Contributor

@jarz jarz commented Feb 13, 2026

Fuzzing caught three bugs in ppcdisasm.cpp.

1. Format-String Crash — tlbld / tlbli

%s was used to format an integer register number (rb), causing it to be interpreted as a pointer → SEGV.

2. Wrong Opcode Index — tlbli Unreachable

tlbli checked index == 30 but correct is 31 (ext_opc 1010 >> 5). Every tlbli instruction silently disassembled as tlbld.

3. Out-of-Bounds Array Read — opc_logic[]

16-element array indexed by 0–31 without bounds check.

@dingusdev dingusdev merged commit b624cfb into dingusdev:master Feb 13, 2026
7 checks passed
@jarz jarz deleted the ppcdisasm-fuzzing-bugs branch February 14, 2026 01:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants