From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <3OX_cYQ0bAL4qsrsvemp-tvshettmh.ksskpiywivgsrxirx.gsq@M3KW2WVRGUFZ5GODRSRYTGD7.apphosting.bounces.google.com> Received: from mail-il1-x147.google.com (mail-il1-x147.google.com [IPv6:2607:f8b0:4864:20::147]) by sourceware.org (Postfix) with ESMTPS id 47DBD3858C60 for ; Mon, 10 Jan 2022 18:47:22 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org 47DBD3858C60 Received: by mail-il1-x147.google.com with SMTP id u7-20020a056e02170700b002b54e12bb9eso6673347ill.6 for ; Mon, 10 Jan 2022 10:47:22 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:date:reply-to:references:message-id :subject:from:to; bh=yhAHq8yeYPp6C4eD472uOCcMsfwHPuLwN/8a1DlNa7o=; b=SZE+eYWQIUk1OTIvuHFlYqHmt3CakF5vufVjOhhx774z2sQbyL9OPU14yPuVlFIb7s EXLazKWlc5LN1kqDnygdX4CLlty2btVmT8Yba89gLDtmH8edxIc9M4z14eueBdPENeEi oJnwz0wF4UwWt+hPv4kMoL9c3gEVwst9rucAMXo7FXiwrl4KrqW1Lu0qm5Z5H48mFscL VqnIy8ES1lC8hTY+XiTO1u3AojwC6lLfaz8/P7lamdf7lVN5q2UB/0/upzf4EQ121Xft K7XRwrv+g5Qx7ixB9iWKPQuXg3jPDNh93jjs66Rn24iQ5QndIQIJn/k7HCODYXdRNpdT W3HA== X-Gm-Message-State: AOAM531v6fZAlZswLCI7qfe9NHsdMtnbslUDrSZ5qHrfKJBloKhSw2nj fEdCZH4jJMqops13kHO2Xu7EwXoSde4HxE05VZKie44gisgu X-Google-Smtp-Source: ABdhPJwaPTkvB5WPpcLLCqlzjF7FTDi+HHhkB2c6z5QhF8MauJGbJPNGs2Gxk65Sh+uRrsJfBY0QFFmKiVgzE7HC2UnrHoX2xuUG MIME-Version: 1.0 X-Received: by 2002:a05:6602:113:: with SMTP id s19mr529669iot.132.1641840441782; Mon, 10 Jan 2022 10:47:21 -0800 (PST) Date: Mon, 10 Jan 2022 10:47:21 -0800 Reply-To: oss-fuzz@monorail-prod.appspotmail.com References: <0=71cc74a7ba1af446b7ed6b9a08b414d9=2c0356afc660f9c3dfa1ade2a69ce6ad=oss-fuzz@monorail-prod.appspotmail.com> X-Google-Appengine-App-Id: s~monorail-prod X-Google-Appengine-App-Id-Alias: monorail-prod Message-ID: <0000000000004f789d05d53ec42e@google.com> Subject: Issue 43505 in oss-fuzz: elfutils:fuzz-dwfl-core: Use-of-uninitialized-value in handle_file_note From: =?UTF-8?Q?evv=E2=80=A6_via_monorail?= To: elfutils-devel@sourceware.org X-Spam-Status: No, score=-1.3 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE, RCVD_IN_DNSWL_NONE, SPF_HELO_NONE, SPF_PASS, TXREP autolearn=ham autolearn_force=no version=3.4.4 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on server2.sourceware.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.29 X-BeenThere: elfutils-devel@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Elfutils-devel mailing list List-Unsubscribe: , List-Archive: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 10 Jan 2022 18:47:23 -0000 Comment #2 on issue 43505 by evv...@gmail.com: elfutils:fuzz-dwfl-core: Use-of-uninitialized-value in handle_file_note https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43505#c2 I haven't figured out how to reproduce it without clang and MSan yet but here's the backtrace just in case ``` Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/crash-19aedce7c369058955d501c7c86af2e6fcb1749c ==7548==WARNING: MemorySanitizer: use-of-uninitialized-value #0 0x63a0d7 in handle_file_note /src/elfutils/libdwfl/dwfl_segment_report_module.c:178:7 #1 0x633493 in dwfl_segment_report_module /src/elfutils/libdwfl/dwfl_segment_report_module.c:776:32 #2 0x537d5d in dwfl_core_file_report /src/elfutils/libdwfl/core-file.c:563:17 #3 0x528af5 in LLVMFuzzerTestOneInput /src/fuzz-dwfl-core.c:52:6 #4 0x455213 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) cxa_noexception.cpp:0 #5 0x440e52 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:324:6 #6 0x4466ac in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) cxa_noexception.cpp:0 #7 0x46f4b2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #8 0x7f69d6c700b2 in __libc_start_main /build/glibc-eX1tMB/glibc-2.31/csu/libc-start.c:308:16 #9 0x41f60d in _start Uninitialized value was created by an allocation of 'u.i' in the stack frame of function 'handle_file_note' #0 0x638830 in handle_file_note /src/elfutils/libdwfl/dwfl_segment_report_module.c:152 SUMMARY: MemorySanitizer: use-of-uninitialized-value (/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_elfutils_3ee01cb67db1a71e7adeb7f3f14722ea62f13cd5/revisions/fuzz-dwfl-core+0x63a0d7) Unique heap origins: 33 Stack depot allocated bytes: 1638400 Unique origin histories: 7 History depot allocated bytes: 196608 ``` -- You received this message because: 1. You were specifically CC'd on the issue You may adjust your notification preferences at: https://bugs.chromium.org/hosting/settings Reply to this email to add a comment.