added bounds check to pivot_inputs (fixes
@@ -1294,10 +1294,14 @@ void pivot_inputs(afl_state_t *afl) {
if (src_str && sscanf(src_str + 1, "%06u", &src_id) == 1) {
+ if (src_id < afl->queued_paths) {
+
struct queue_entry *s = afl->queue_buf[src_id];
if (s) { q->depth = s->depth + 1; }
+ }
+
if (afl->max_depth < q->depth) { afl->max_depth = q->depth; }
}
