<html>
<head>
<base href="https://bugs.llvm.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_NEW "
title="NEW - Other APIs can be used after FuzzedDataProvider::ConsumeRemainingBytes"
href="https://bugs.llvm.org/show_bug.cgi?id=51739">51739</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>Other APIs can be used after FuzzedDataProvider::ConsumeRemainingBytes
</td>
</tr>
<tr>
<th>Product</th>
<td>compiler-rt
</td>
</tr>
<tr>
<th>Version</th>
<td>unspecified
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>NEW
</td>
</tr>
<tr>
<th>Severity</th>
<td>enhancement
</td>
</tr>
<tr>
<th>Priority</th>
<td>P
</td>
</tr>
<tr>
<th>Component</th>
<td>compiler-rt
</td>
</tr>
<tr>
<th>Assignee</th>
<td>unassignedbugs@nondot.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>smoreland@google.com
</td>
</tr>
<tr>
<th>CC</th>
<td>llvm-bugs@lists.llvm.org
</td>
</tr></table>
<p>
<div>
<pre>We had a recent bug in a fuzzer where ConsumeBool was called after
ConsumeRemainingBytes, discovered by <a href="mailto:devinmoore@google.com">devinmoore@google.com</a> by viewing fuzzer
coverage information. Would it make sense for ConsumeRemainingBytes to put the
fuzzed data provider in an invalid state such that additional calls to read
data from the fuzzer result in an abort? Any path where Consume* follows
ConsumeRemainingBytes means that certain coverage is impossible.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are on the CC list for the bug.</li>
</ul>
</body>
</html>