id3v2lib icon indicating copy to clipboard operation
id3v2lib copied to clipboard

Segmentation faults 2017-06-25

Open rwhitworth opened this issue 7 years ago • 0 comments

Hello, I was using libFuzzer and American Fuzzy Lop (afl-fuzz) to fuzz input to a test program using id3v2lib on Linux. Is fixing the crashes from these input files something you're interested in? The input files and example test.c program can be found here: https://github.com/rwhitworth/id3v2lib-fuzz/tree/master/2017-06-25

The files can be executed as ./test id_filename to cause seg faults.

Let me know if I can provide any more information to help narrow down this issue. I had difficulty compiling the library with debugging enabled so the gdb backtraces may not be as useful as they could be.

id:000001,sig:11,src:000019,op:havoc,rep:2

#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S:363
363     ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S: No such file or directory.
(gdb) bt
#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S:363
#1  0x000000000040192e in load_tag_with_buffer ()
#2  0x00000000004015af in load_tag ()
#3  0x000000000040122b in main (argc=2, argv=0x7ffe610b9218) at test.c:10

id:000002,sig:11,src:000022,op:int32,pos:6,val:be:+1

#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S:420
420     ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S: No such file or directory.
(gdb) bt
#0  __memmove_sse2_unaligned_erms () at ../sysdeps/x86_64/multiarch/../multiarch/memmove-vec-unaligned-erms.S:420
#1  0x0000000000406621 in parse_frame ()
#2  0x00000000004019cf in load_tag_with_buffer ()
#3  0x00000000004015af in load_tag ()
#4  0x000000000040122b in main (argc=2, argv=0x7ffcdc7b0c58) at test.c:10

rwhitworth avatar Jun 25 '17 17:06 rwhitworth