Skip to content

Null Pointer Deref in wasm_parse_block #22

@haruki3hhh

Description

@haruki3hhh

version

e81176b

compile

make vmir.asan

asan report

root@9dc6ce043bcb:~/Ablation/vmir/crashes# ../vmir.asan id:000023,sig:11,src:000006,op:arith8,pos:23,val:-30
AddressSanitizer:DEADLYSIGNAL
=================================================================
==4108594==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x560771ea04b1 bp 0x7fffa6d7d340 sp 0x7fffa6d7d260 T0)
==4108594==The signal is caused by a READ memory access.
==4108594==Hint: address points to the zero page.
    #0 0x560771ea04b0 in wasm_parse_block src/vmir_wasm_parser.c:1190
    #1 0x560771ea0a32 in wasm_parse_section_code src/vmir_wasm_parser.c:1257
    #2 0x560771ea29b3 in wasm_parse_module src/vmir_wasm_parser.c:1422
    #3 0x560771ea51a0 in vmir_load src/vmir.c:920
    #4 0x560771e0c9c9 in main src/main.c:166
    #5 0x7f28a34ed082 in __libc_start_main ../csu/libc-start.c:308
    #6 0x560771e0bd2d in _start (/root/Ablation/vmir/vmir.asan+0x12d2d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV src/vmir_wasm_parser.c:1190 in wasm_parse_block
==4108594==ABORTING

reproduce

./vmir https://github.com/haruki3hhh/fuzzing/blob/main/vmir/id%3A000023%2Csig%3A11%2Csrc%3A000006%2Cop%3Aarith8%2Cpos%3A23%2Cval%3A-30

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions