↓ Skip to main content

3rd Annual Binary Golf Grand Prix (BGGP3)

··1 min

The 3rd Annual Binary Golf Grand Prix (BGGP3) ran from 2022-06-17 to 2022-08-19. The goal is to find the smallest file which will crash a specific program, with bonus points for a writeup, for hijacking execution to print “3”, and for getting a patch for the bug merged before the competition ends. Remyhax fuzzed the GnuCOBOL compiler with Honggfuzz and ended up with a 40-byte file that triggers a stack buffer overflow in cobc 3.1.2.0, caused by an off-by-one length check. novafacing took a shortcut and crashed clang 15 with nothing more exotic than int main(){} and an unusual target triple such as i386-apple-windows-eabi. An overview of the 2020 and 2021 entries is available in netspooky/BGGP. This year’s results will be made public in the coming days, also via @binarygolf.