[llvm-bugs] [Bug 33091] New: null pointer dereference in libfuzzer?

via llvm-bugs llvm-bugs at lists.llvm.org
Thu May 18 09:20:02 PDT 2017


https://bugs.llvm.org/show_bug.cgi?id=33091

            Bug ID: 33091
           Summary: null pointer dereference in libfuzzer?
           Product: new-bugs
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: new bugs
          Assignee: unassignedbugs at nondot.org
          Reporter: agostino.sarubbo at gmail.com
                CC: llvm-bugs at lists.llvm.org

Created attachment 18466
  --> https://bugs.llvm.org/attachment.cgi?id=18466&action=edit
stacktrace1

This is the first time I tried to use libfuzzer, I'd like to understand if I
did something bad on my side.

I downloaded this:
https://github.com/google/oss-fuzz/blob/master/projects/curl/curl_fuzzer.cc
I compiled it with: 

clang++ -g3 -fsanitize=address,undefined -fsanitize-coverage=trace-pc-guard
curl_fuzzer.cc -lcurl /usr/lib64/libFuzzer.a -o curl_libfuzzer

while I launch ./curl_libfuzzer I get (see stacktrace1):
==19775==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc
0x000000000000 bp 0x000000000000 sp 0x7ffe82b616b8 T0)


after that I tried to do the same thing with libfuzzer compiled with
asan/ubsan,
I get more info but the same result (see stacktrace2).

I have clang 4.0.0 and libfuzzer 3.9.1

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20170518/08e6e7d5/attachment-0001.html>


More information about the llvm-bugs mailing list