Skip to content

Instantly share code, notes, and snippets.

@brandonprry
Created May 28, 2016 01:37
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save brandonprry/9208ebd0bd4b79a6b2e98c92c8994f0a to your computer and use it in GitHub Desktop.
Save brandonprry/9208ebd0bd4b79a6b2e98c92c8994f0a to your computer and use it in GitHub Desktop.
root@w00den-fuzzer:~/libical_asan/build# rm -rf ./*
root@w00den-fuzzer:~/libical_asan/build# cmake -DCMAKE_CXX_FLAGS="-fsanitize=address -fno-omit-frame-pointer" -DCMAKE_EXE_LINKER_FLAGS="-fsanitize=address" -DSTATIC_ONLY=true -DCMAKE_CXX_COMPILER="clang++" ..
-- The C compiler identification is GNU 5.2.1
-- The CXX compiler identification is Clang 3.6.2
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Check for working CXX compiler: /usr/bin/clang++
-- Check for working CXX compiler: /usr/bin/clang++ -- works
-- Detecting CXX compiler ABI info
-- Detecting CXX compiler ABI info - done
-- Detecting CXX compile features
-- Detecting CXX compile features - done
-- Found Perl: /usr/bin/perl (found version "5.20.2")
-- Optional package ICU was not found
-- Looking for include file byteswap.h
-- Looking for include file byteswap.h - found
-- Looking for include file dirent.h
-- Looking for include file dirent.h - found
-- Looking for include file endian.h
-- Looking for include file endian.h - found
-- Looking for include file inttypes.h
-- Looking for include file inttypes.h - found
-- Looking for include file pthread.h
-- Looking for include file pthread.h - found
-- Looking for include file sys/endian.h
-- Looking for include file sys/endian.h - not found
-- Looking for include file sys/param.h
-- Looking for include file sys/param.h - found
-- Looking for include file sys/utsname.h
-- Looking for include file sys/utsname.h - found
-- Looking for include file fcntl.h
-- Looking for include file fcntl.h - found
-- Looking for include file unistd.h
-- Looking for include file unistd.h - found
-- Looking for include file wctype.h
-- Looking for include file wctype.h - found
-- Looking for access
-- Looking for access - found
-- Looking for fork
-- Looking for fork - found
-- Looking for getopt
-- Looking for getopt - found
-- Looking for getpid
-- Looking for getpid - found
-- Looking for getpwent
-- Looking for getpwent - found
-- Looking for gmtime_r
-- Looking for gmtime_r - found
-- Looking for localtime_r
-- Looking for localtime_r - found
-- Looking for mkdir
-- Looking for mkdir - found
-- Looking for open
-- Looking for open - found
-- Looking for nanosleep
-- Looking for nanosleep - found
-- Looking for signal
-- Looking for signal - found
-- Looking for snprintf
-- Looking for snprintf - found
-- Looking for stat
-- Looking for stat - found
-- Looking for strdup
-- Looking for strdup - found
-- Looking for strcasecmp
-- Looking for strcasecmp - found
-- Looking for strncasecmp
-- Looking for strncasecmp - found
-- Looking for read
-- Looking for read - found
-- Looking for unlink
-- Looking for unlink - found
-- Looking for usleep
-- Looking for usleep - found
-- Looking for waitpid
-- Looking for waitpid - found
-- Looking for write
-- Looking for write - found
-- Looking for alarm
-- Looking for alarm - found
-- Looking for backtrace
-- Looking for backtrace - found
-- Looking for iswspace
-- Looking for iswspace - found
-- Looking for setenv
-- Looking for setenv - found
-- Looking for unsetenv
-- Looking for unsetenv - found
-- Looking for GetNumberFormat
-- Looking for GetNumberFormat - not found
-- Looking for sys/types.h
-- Looking for sys/types.h - found
-- Looking for stdint.h
-- Looking for stdint.h - found
-- Looking for stddef.h
-- Looking for stddef.h - found
-- Check size of intptr_t
-- Check size of intptr_t - done
-- Check size of pid_t
-- Check size of pid_t - done
-- Check size of size_t
-- Check size of size_t - done
-- Check size of ssize_t
-- Check size of ssize_t - done
-- Check size of time_t
-- Check size of time_t - done
-- Check size of wint_t
-- Check size of wint_t - failed
-- Looking for include file pthread.h
-- Looking for include file pthread.h - found
-- Looking for pthread_create
-- Looking for pthread_create - not found
-- Looking for pthread_create in pthreads
-- Looking for pthread_create in pthreads - not found
-- Looking for pthread_create in pthread
-- Looking for pthread_create in pthread - found
-- Found Threads: TRUE
-- Looking for pthread_attr_get_np in pthread
-- Looking for pthread_attr_get_np in pthread - not found
-- Looking for pthread_getattr_np in pthread
-- Looking for pthread_getattr_np in pthread - found
-- Looking for pthread_create in pthread
-- Looking for pthread_create in pthread - found
-- Looking for include files pthread.h, pthread_np.h
-- Looking for include files pthread.h, pthread_np.h - not found
-- Performing Test HAVE_GCC_UNUSED_BUT_SET
-- Performing Test HAVE_GCC_UNUSED_BUT_SET - Success
-- Performing Test HAVE_GCC_LOGICAL_OP
-- Performing Test HAVE_GCC_LOGICAL_OP - Success
-- Performing Test HAVE_GCC_POINTER_MEMACCESS
-- Performing Test HAVE_GCC_POINTER_MEMACCESS - Success
-- Performing Test HAVE_GCC_FORMAT_SECURITY
-- Performing Test HAVE_GCC_FORMAT_SECURITY - Success
-- Performing Test HAVE_GXX_UNUSED_BUT_SET
-- Performing Test HAVE_GXX_UNUSED_BUT_SET - Failed
-- Performing Test HAVE_GXX_LOGICAL_OP
-- Performing Test HAVE_GXX_LOGICAL_OP - Failed
-- Performing Test HAVE_GXX_POINTER_MEMACCESS
-- Performing Test HAVE_GXX_POINTER_MEMACCESS - Success
-- Performing Test HAVE_GXX_REORDER
-- Performing Test HAVE_GXX_REORDER - Success
-- Performing Test HAVE_GXX_FORMAT_SECURITY
-- Performing Test HAVE_GXX_FORMAT_SECURITY - Success
-- Found Doxygen: /usr/bin/doxygen (found version "1.8.9.1")
-- Configuring done
-- Generating done
-- Build files have been written to: /root/libical_asan/build
root@w00den-fuzzer:~/libical_asan/build# make
Scanning dependencies of target ical-header
[ 1%] Generating icalderivedvalue.h
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 2%] Generating icalderivedproperty.c
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 3%] Generating icalderivedparameter.c
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 4%] Generating icalrestriction.c
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 4%] Generating icalderivedvalue.c
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 5%] Generating icalderivedproperty.h
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 6%] Generating icalderivedparameter.h
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
LANGUAGE = (unset),
LC_ALL = (unset),
LANG = "en_US.UTF-8"
are supported and installed on your system.
perl: warning: Falling back to the standard locale ("C").
[ 6%] Built target ical-header
Scanning dependencies of target ical
[ 7%] Building C object src/libical/CMakeFiles/ical.dir/icalderivedproperty.c.o
[ 7%] Building C object src/libical/CMakeFiles/ical.dir/icalderivedparameter.c.o
[ 8%] Building C object src/libical/CMakeFiles/ical.dir/icalrestriction.c.o
[ 9%] Building C object src/libical/CMakeFiles/ical.dir/icalderivedvalue.c.o
[ 10%] Building C object src/libical/CMakeFiles/ical.dir/icalarray.c.o
[ 10%] Building C object src/libical/CMakeFiles/ical.dir/icalattach.c.o
[ 11%] Building C object src/libical/CMakeFiles/ical.dir/icalcomponent.c.o
[ 12%] Building C object src/libical/CMakeFiles/ical.dir/icalenums.c.o
[ 13%] Building C object src/libical/CMakeFiles/ical.dir/icalerror.c.o
[ 13%] Building C object src/libical/CMakeFiles/ical.dir/icalmemory.c.o
[ 14%] Building C object src/libical/CMakeFiles/ical.dir/icalmime.c.o
[ 15%] Building C object src/libical/CMakeFiles/ical.dir/icalparameter.c.o
[ 16%] Building C object src/libical/CMakeFiles/ical.dir/icalparser.c.o
[ 16%] Building C object src/libical/CMakeFiles/ical.dir/icalproperty.c.o
[ 17%] Building C object src/libical/CMakeFiles/ical.dir/icalrecur.c.o
[ 18%] Building C object src/libical/CMakeFiles/ical.dir/icaltime.c.o
[ 19%] Building C object src/libical/CMakeFiles/ical.dir/icaltz-util.c.o
[ 19%] Building C object src/libical/CMakeFiles/ical.dir/icaltimezone.c.o
[ 20%] Building C object src/libical/CMakeFiles/ical.dir/icalduration.c.o
[ 21%] Building C object src/libical/CMakeFiles/ical.dir/icalperiod.c.o
[ 22%] Building C object src/libical/CMakeFiles/ical.dir/icaltypes.c.o
[ 22%] Building C object src/libical/CMakeFiles/ical.dir/icalvalue.c.o
[ 23%] Building C object src/libical/CMakeFiles/ical.dir/pvl.c.o
[ 24%] Building C object src/libical/CMakeFiles/ical.dir/sspm.c.o
[ 25%] Building C object src/libical/CMakeFiles/ical.dir/icallangbind.c.o
[ 25%] Building C object src/libical/CMakeFiles/ical.dir/caldate.c.o
Linking C static library ../../lib/libical.a
[ 30%] Built target ical
Scanning dependencies of target ical-static
[ 31%] Building C object src/libical/CMakeFiles/ical-static.dir/icalderivedproperty.c.o
[ 31%] Building C object src/libical/CMakeFiles/ical-static.dir/icalderivedparameter.c.o
[ 32%] Building C object src/libical/CMakeFiles/ical-static.dir/icalrestriction.c.o
[ 33%] Building C object src/libical/CMakeFiles/ical-static.dir/icalderivedvalue.c.o
[ 34%] Building C object src/libical/CMakeFiles/ical-static.dir/icalarray.c.o
[ 34%] Building C object src/libical/CMakeFiles/ical-static.dir/icalattach.c.o
[ 35%] Building C object src/libical/CMakeFiles/ical-static.dir/icalcomponent.c.o
[ 36%] Building C object src/libical/CMakeFiles/ical-static.dir/icalenums.c.o
[ 37%] Building C object src/libical/CMakeFiles/ical-static.dir/icalerror.c.o
[ 37%] Building C object src/libical/CMakeFiles/ical-static.dir/icalmemory.c.o
[ 38%] Building C object src/libical/CMakeFiles/ical-static.dir/icalmime.c.o
[ 39%] Building C object src/libical/CMakeFiles/ical-static.dir/icalparameter.c.o
[ 40%] Building C object src/libical/CMakeFiles/ical-static.dir/icalparser.c.o
[ 40%] Building C object src/libical/CMakeFiles/ical-static.dir/icalproperty.c.o
[ 41%] Building C object src/libical/CMakeFiles/ical-static.dir/icalrecur.c.o
[ 42%] Building C object src/libical/CMakeFiles/ical-static.dir/icaltime.c.o
[ 43%] Building C object src/libical/CMakeFiles/ical-static.dir/icaltz-util.c.o
[ 43%] Building C object src/libical/CMakeFiles/ical-static.dir/icaltimezone.c.o
[ 44%] Building C object src/libical/CMakeFiles/ical-static.dir/icalduration.c.o
[ 45%] Building C object src/libical/CMakeFiles/ical-static.dir/icalperiod.c.o
[ 46%] Building C object src/libical/CMakeFiles/ical-static.dir/icaltypes.c.o
[ 46%] Building C object src/libical/CMakeFiles/ical-static.dir/icalvalue.c.o
[ 47%] Building C object src/libical/CMakeFiles/ical-static.dir/pvl.c.o
[ 48%] Building C object src/libical/CMakeFiles/ical-static.dir/sspm.c.o
[ 49%] Building C object src/libical/CMakeFiles/ical-static.dir/icallangbind.c.o
[ 49%] Building C object src/libical/CMakeFiles/ical-static.dir/caldate.c.o
Linking C static library ../../lib/libical.a
[ 54%] Built target ical-static
Scanning dependencies of target ical_cxx-static
[ 55%] Building CXX object src/libical/CMakeFiles/ical_cxx-static.dir/icalparameter_cxx.cpp.o
[ 56%] Building CXX object src/libical/CMakeFiles/ical_cxx-static.dir/icalproperty_cxx.cpp.o
[ 57%] Building CXX object src/libical/CMakeFiles/ical_cxx-static.dir/icalvalue_cxx.cpp.o
[ 57%] Building CXX object src/libical/CMakeFiles/ical_cxx-static.dir/vcomponent_cxx.cpp.o
Linking CXX static library ../../lib/libical_cxx.a
[ 57%] Built target ical_cxx-static
Scanning dependencies of target icalss-header
[ 57%] Built target icalss-header
Scanning dependencies of target icalss
[ 58%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalcalendar.c.o
[ 58%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalclassify.c.o
[ 59%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalcluster.c.o
[ 60%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalgauge.c.o
[ 61%] Building C object src/libicalss/CMakeFiles/icalss.dir/icaldirset.c.o
[ 61%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalfileset.c.o
[ 62%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalset.c.o
[ 63%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalspanlist.c.o
[ 64%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalmessage.c.o
[ 64%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalsslexer.c.o
[ 65%] Building C object src/libicalss/CMakeFiles/icalss.dir/icalssyacc.c.o
Linking C static library ../../lib/libicalss.a
[ 65%] Built target icalss
Scanning dependencies of target icalss-static
[ 66%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalcalendar.c.o
[ 67%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalclassify.c.o
[ 67%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalcluster.c.o
[ 68%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalgauge.c.o
[ 69%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icaldirset.c.o
[ 70%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalfileset.c.o
[ 70%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalset.c.o
[ 71%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalspanlist.c.o
[ 72%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalmessage.c.o
[ 73%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalsslexer.c.o
[ 73%] Building C object src/libicalss/CMakeFiles/icalss-static.dir/icalssyacc.c.o
Linking C static library ../../lib/libicalss.a
[ 73%] Built target icalss-static
Scanning dependencies of target icalss_cxx
[ 74%] Building CXX object src/libicalss/CMakeFiles/icalss_cxx.dir/icalspanlist_cxx.cpp.o
Linking CXX static library ../../lib/libicalss_cxx.a
[ 74%] Built target icalss_cxx
Scanning dependencies of target icalss_cxx-static
[ 75%] Building CXX object src/libicalss/CMakeFiles/icalss_cxx-static.dir/icalspanlist_cxx.cpp.o
Linking CXX static library ../../lib/libicalss_cxx.a
[ 75%] Built target icalss_cxx-static
Scanning dependencies of target icalvcal
[ 76%] Building C object src/libicalvcal/CMakeFiles/icalvcal.dir/icalvcal.c.o
[ 76%] Building C object src/libicalvcal/CMakeFiles/icalvcal.dir/vobject.c.o
[ 77%] Building C object src/libicalvcal/CMakeFiles/icalvcal.dir/vcaltmp.c.o
[ 78%] Building C object src/libicalvcal/CMakeFiles/icalvcal.dir/vcc.c.o
Linking C static library ../../lib/libicalvcal.a
[ 78%] Built target icalvcal
Scanning dependencies of target icalvcal-static
[ 79%] Building C object src/libicalvcal/CMakeFiles/icalvcal-static.dir/icalvcal.c.o
[ 79%] Building C object src/libicalvcal/CMakeFiles/icalvcal-static.dir/vobject.c.o
[ 80%] Building C object src/libicalvcal/CMakeFiles/icalvcal-static.dir/vcaltmp.c.o
[ 81%] Building C object src/libicalvcal/CMakeFiles/icalvcal-static.dir/vcc.c.o
Linking C static library ../../lib/libicalvcal.a
[ 81%] Built target icalvcal-static
Scanning dependencies of target builtin_timezones
[ 81%] Building C object src/test/CMakeFiles/builtin_timezones.dir/builtin_timezones.c.o
Linking C executable builtin_timezones
[ 81%] Built target builtin_timezones
Scanning dependencies of target copycluster
[ 82%] Building C object src/test/CMakeFiles/copycluster.dir/copycluster.c.o
Linking C executable copycluster
[ 82%] Built target copycluster
Scanning dependencies of target icalrecur_test
[ 83%] Building C object src/test/CMakeFiles/icalrecur_test.dir/icalrecur_test.c.o
Linking C executable icalrecur_test
[ 83%] Built target icalrecur_test
Scanning dependencies of target icalrecurtest
[ 84%] Building C object src/test/CMakeFiles/icalrecurtest.dir/icalrecur_test.c.o
Linking C executable icalrecurtest
[ 84%] Built target icalrecurtest
Scanning dependencies of target parser
[ 85%] Building C object src/test/CMakeFiles/parser.dir/icaltestparser.c.o
Linking C executable parser
[ 85%] Built target parser
Scanning dependencies of target process
[ 85%] Building C object src/test/CMakeFiles/process.dir/process.c.o
Linking C executable process
[ 85%] Built target process
Scanning dependencies of target recur
[ 86%] Building C object src/test/CMakeFiles/recur.dir/recur.c.o
Linking C executable recur
[ 86%] Built target recur
Scanning dependencies of target regression
[ 87%] Building C object src/test/CMakeFiles/regression.dir/regression.c.o
[ 88%] Building C object src/test/CMakeFiles/regression.dir/regression-component.c.o
[ 88%] Building C object src/test/CMakeFiles/regression.dir/regression-classify.c.o
[ 89%] Building C object src/test/CMakeFiles/regression.dir/regression-utils.c.o
[ 90%] Building C object src/test/CMakeFiles/regression.dir/regression-recur.c.o
[ 91%] Building C object src/test/CMakeFiles/regression.dir/regression-storage.c.o
[ 91%] Building CXX object src/test/CMakeFiles/regression.dir/regression-cxx.cpp.o
Linking CXX executable regression
[ 91%] Built target regression
Scanning dependencies of target stow
[ 92%] Building C object src/test/CMakeFiles/stow.dir/stow.c.o
Linking C executable stow
[ 92%] Built target stow
Scanning dependencies of target testmime
[ 93%] Building C object src/test/CMakeFiles/testmime.dir/testmime.c.o
Linking C executable testmime
[ 93%] Built target testmime
Scanning dependencies of target testvcal
[ 94%] Building C object src/test/CMakeFiles/testvcal.dir/testvcal.c.o
Linking C executable testvcal
[ 94%] Built target testvcal
Scanning dependencies of target timezones
[ 95%] Building C object src/test/CMakeFiles/timezones.dir/timezones.c.o
Linking C executable timezones
[ 95%] Built target timezones
Scanning dependencies of target doesnothing
[ 96%] Building C object examples/CMakeFiles/doesnothing.dir/access_components.c.o
[ 96%] Building C object examples/CMakeFiles/doesnothing.dir/access_properties_and_parameters.c.o
[ 97%] Building C object examples/CMakeFiles/doesnothing.dir/errors.c.o
[ 98%] Building C object examples/CMakeFiles/doesnothing.dir/main.c.o
[100%] Building C object examples/CMakeFiles/doesnothing.dir/parse_text.c.o
Linking C executable ../bin/doesnothing
[100%] Built target doesnothing
root@w00den-fuzzer:~/libical_asan/build# cd
root@w00den-fuzzer:~# cd syncdir/new_crashes/
root@w00den-fuzzer:~/syncdir/new_crashes# ~/libical_asan/build/src/test/parser ./id:000030,sig:11,sync:fuzzer6,src:000826
=================================================================
==10579==ERROR: AddressSanitizer: heap-use-after-free on address 0x60200000ee93 at pc 0x7f641820f649 bp 0x7ffc2a642e50 sp 0x7ffc2a6425c8
READ of size 2 at 0x60200000ee93 thread T0
#0 0x7f641820f648 (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x60648)
#1 0x7f64182105a5 in __interceptor_vsnprintf (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x615a5)
#2 0x7f6418210811 in snprintf (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x61811)
#3 0x426171 in icalreqstattype_as_string_r (/root/libical_asan/build/src/test/parser+0x426171)
#4 0x428a12 in icalvalue_as_ical_string_r (/root/libical_asan/build/src/test/parser+0x428a12)
#5 0x41a0e5 in icalproperty_as_ical_string_r (/root/libical_asan/build/src/test/parser+0x41a0e5)
#6 0x411e56 in icalcomponent_as_ical_string_r (/root/libical_asan/build/src/test/parser+0x411e56)
#7 0x411cf7 in icalcomponent_as_ical_string (/root/libical_asan/build/src/test/parser+0x411cf7)
#8 0x411714 in main (/root/libical_asan/build/src/test/parser+0x411714)
#9 0x7f6417be7a3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x20a3f)
#10 0x411528 in _start (/root/libical_asan/build/src/test/parser+0x411528)
0x60200000ee94 is located 0 bytes to the right of 4-byte region [0x60200000ee90,0x60200000ee94)
freed by thread T0 here:
#0 0x7f64182476aa in __interceptor_free (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x986aa)
#1 0x416f01 in icalmemory_free_buffer (/root/libical_asan/build/src/test/parser+0x416f01)
#2 0x41916d in icalparser_add_line (/root/libical_asan/build/src/test/parser+0x41916d)
#3 0x4116fd in main (/root/libical_asan/build/src/test/parser+0x4116fd)
#4 0x7f6417be7a3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x20a3f)
previously allocated by thread T0 here:
#0 0x7f64182479aa in malloc (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x989aa)
#1 0x416e6d in icalmemory_new_buffer (/root/libical_asan/build/src/test/parser+0x416e6d)
#2 0x41751a in make_segment (/root/libical_asan/build/src/test/parser+0x41751a)
#3 0x4178fb in icalparser_get_value (/root/libical_asan/build/src/test/parser+0x4178fb)
#4 0x418f4e in icalparser_add_line (/root/libical_asan/build/src/test/parser+0x418f4e)
#5 0x4116fd in main (/root/libical_asan/build/src/test/parser+0x4116fd)
#6 0x7f6417be7a3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x20a3f)
SUMMARY: AddressSanitizer: heap-use-after-free ??:0 ??
Shadow bytes around the buggy address:
0x0c047fff9d80: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
0x0c047fff9d90: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
0x0c047fff9da0: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
0x0c047fff9db0: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
0x0c047fff9dc0: fa fa fd fa fa fa fd fd fa fa fd fa fa fa fd fd
=>0x0c047fff9dd0: fa fa[fd]fa fa fa fd fd fa fa 05 fa fa fa fd fa
0x0c047fff9de0: fa fa fd fa fa fa 02 fa fa fa 02 fa fa fa fd fa
0x0c047fff9df0: fa fa 04 fa fa fa fd fa fa fa fd fa fa fa fd fa
0x0c047fff9e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
0x0c047fff9e20: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
Shadow byte legend (one shadow byte represents 8 application bytes):
Addressable: 00
Partially addressable: 01 02 03 04 05 06 07
Heap left redzone: fa
Heap right redzone: fb
Freed heap region: fd
Stack left redzone: f1
Stack mid redzone: f2
Stack right redzone: f3
Stack partial redzone: f4
Stack after return: f5
Stack use after scope: f8
Global redzone: f9
Global init order: f6
Poisoned by user: f7
Container overflow: fc
Array cookie: ac
Intra object redzone: bb
ASan internal: fe
==10579==ABORTING
root@w00den-fuzzer:~/syncdir/new_crashes# ldd ~/libical_asan/build/src/test/parser
linux-vdso.so.1 => (0x00007ffe6dacb000)
libasan.so.2 => /usr/lib/x86_64-linux-gnu/libasan.so.2 (0x00007ff1bb801000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007ff1bb5e3000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007ff1bb218000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007ff1bb014000)
libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007ff1bad0c000)
libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007ff1baaf4000)
/lib64/ld-linux-x86-64.so.2 (0x0000564b60dae000)
root@w00den-fuzzer:~/syncdir/new_crashes#
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment