[llvm-bugs] [Bug 40301] New: llvm-opt-fuzzer produces invalid bitcode files, which allocate too much memory for oss-fuzz

[via llvm-bugs]

https://bugs.llvm.org/show_bug.cgi?id=40301

            Bug ID: 40301
           Summary: llvm-opt-fuzzer produces invalid bitcode files, which
                    allocate too much memory for oss-fuzz
           Product: libraries
           Version: trunk
          Hardware: PC
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P
         Component: Support Libraries
          Assignee: unassignedbugs at nondot.org
          Reporter: florian_hahn at apple.com
                CC: llvm-bugs at lists.llvm.org

I had a look at a few oss-fuzz issues (see below) that failed with
out-of-memory and the ones I looked at did not expose problems with
transformations. Instead they fail with out-of-memory, because the bitcode
files they use have invalid forward references, with very high indices (e.g.
because they use relative IDs that wrap around) and we end up running out of
memory when resizing the value list in BitcodeReaderValueList::getValueFwdRef.

Maybe the fuzzers could avoid creating such invalid bitcode files?


https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12352
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12442
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=12239

-- 
You are receiving this mail because:
You are on the CC list for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.llvm.org/pipermail/llvm-bugs/attachments/20190113/0be04a33/attachment.html>