Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzzing: panicked at 'attempt to multiply with overflow' #9

Closed
PaulGrandperrin opened this issue Jan 13, 2018 · 1 comment
Closed

Comments

@PaulGrandperrin
Copy link

Hi,
I'm playing with libFuzzer and I found this bug:

demangle("_ZN2222222222222222222222EE"); // panicked at 'attempt to multiply with overflow'

I don't know the mangling format so I'm not even sure if this is a bug that makes sense and is worth fixing.

backtrace
thread 'main' panicked at 'attempt to multiply with overflow', /home/paulg/.cargo/git/checkouts/rustc-demangle-919c95a986d4044e/48646c6/src/lib.rs:127:25
stack backtrace:
   0: std::sys::unix::backtrace::tracing::imp::unwind_backtrace
             at libstd/sys/unix/backtrace/tracing/gcc_s.rs:49
   1: std::sys_common::backtrace::print
             at libstd/sys_common/backtrace.rs:68
             at libstd/sys_common/backtrace.rs:57
   2: std::panicking::default_hook::{{closure}}
             at libstd/panicking.rs:380
   3: std::panicking::default_hook
             at libstd/panicking.rs:396
   4: std::panicking::rust_panic_with_hook
             at libstd/panicking.rs:576
   5: std::panicking::begin_panic
             at libstd/panicking.rs:537
   6: std::panicking::begin_panic_fmt
             at libstd/panicking.rs:521
   7: rust_begin_unwind
             at libstd/panicking.rs:497
   8: core::panicking::panic_fmt
             at libcore/panicking.rs:71
   9: core::panicking::panic
             at libcore/panicking.rs:51
  10: rustc_demangle::demangle
             at /home/paulg/.cargo/git/checkouts/rustc-demangle-919c95a986d4044e/48646c6/src/lib.rs:127
  11: playrust::main
             at src/main.rs:9
  12: std::rt::lang_start::{{closure}}
             at /checkout/src/libstd/rt.rs:74
  13: std::panicking::try::do_call
             at libstd/rt.rs:59
             at libstd/panicking.rs:479
  14: __rust_maybe_catch_panic
             at libpanic_unwind/lib.rs:102
  15: std::rt::lang_start_internal
             at libstd/panicking.rs:458
             at libstd/panic.rs:365
             at libstd/rt.rs:58
  16: std::rt::lang_start
             at /checkout/src/libstd/rt.rs:74
  17: main
  18: __libc_start_main
  19: _start
@alexcrichton
Copy link
Member

Awesome, thanks! I ended up running some more fuzzing and found a few more bugs!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants