Skip to content

Null Pointer Deref in wasm_parse_block #22

Description

@haruki3hhh

version

e81176b

compile

make vmir.asan

asan report

root@9dc6ce043bcb:~/Ablation/vmir/crashes# ../vmir.asan id:000023,sig:11,src:000006,op:arith8,pos:23,val:-30
AddressSanitizer:DEADLYSIGNAL
=================================================================
==4108594==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x560771ea04b1 bp 0x7fffa6d7d340 sp 0x7fffa6d7d260 T0)
==4108594==The signal is caused by a READ memory access.
==4108594==Hint: address points to the zero page.
    #0 0x560771ea04b0 in wasm_parse_block src/vmir_wasm_parser.c:1190
    #1 0x560771ea0a32 in wasm_parse_section_code src/vmir_wasm_parser.c:1257
    #2 0x560771ea29b3 in wasm_parse_module src/vmir_wasm_parser.c:1422
    #3 0x560771ea51a0 in vmir_load src/vmir.c:920
    #4 0x560771e0c9c9 in main src/main.c:166
    #5 0x7f28a34ed082 in __libc_start_main ../csu/libc-start.c:308
    #6 0x560771e0bd2d in _start (/root/Ablation/vmir/vmir.asan+0x12d2d)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV src/vmir_wasm_parser.c:1190 in wasm_parse_block
==4108594==ABORTING

reproduce

./vmir https://github.com/haruki3hhh/fuzzing/blob/main/vmir/id%3A000023%2Csig%3A11%2Csrc%3A000006%2Cop%3Aarith8%2Cpos%3A23%2Cval%3A-30

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions