Skip to content

Evil Memory Address Write in function_prepare_parse #19

@haruki3hhh

Description

@haruki3hhh

version

e81176b

compile

make vmir.asan

asan report

root@9dc6ce043bcb:~/Ablation/vmir/crashes# ../vmir.asan  id:000005,sig:11,src:000000,op:arith8,pos:8,val:+9
AddressSanitizer:DEADLYSIGNAL
=================================================================
==4108439==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000024 (pc 0x55e2684c62d8 bp 0x7ffc1f605ec0 sp 0x7ffc1f605ea0 T0)
==4108439==The signal is caused by a WRITE memory access.
==4108439==Hint: address points to the zero page.
    #0 0x55e2684c62d7 in function_prepare_parse src/vmir_function.c:145
    #1 0x55e2685498b9 in wasm_parse_section_code src/vmir_wasm_parser.c:1243
    #2 0x55e26854b9b3 in wasm_parse_module src/vmir_wasm_parser.c:1422
    #3 0x55e26854e1a0 in vmir_load src/vmir.c:920
    #4 0x55e2684b59c9 in main src/main.c:166
    #5 0x7ffa7c5e4082 in __libc_start_main ../csu/libc-start.c:308
    #6 0x55e2684b4d2d in _start (/root/Ablation/vmir/vmir.asan+0x12d2d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV src/vmir_function.c:145 in function_prepare_parse
==4108439==ABORTING

reproduce

./vmir https://github.com/haruki3hhh/fuzzing/blob/main/vmir/id%3A000005%2Csig%3A11%2Csrc%3A000000%2Cop%3Aarith8%2Cpos%3A8%2Cval%3A%2B9

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions