-
Notifications
You must be signed in to change notification settings - Fork 2.6k
Open
Description
Many issues where today closed as verified, example this:
https://issues.oss-fuzz.com/issues/457634826
But this (and likely others) are still replicatiable locally:
The message says "If this is incorrect, please file a bug on " thus iam filing a bug here
Running: /home/michael/libfuzz-repro/457634826/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ADPCM_PSXC_DEC_fuzzer-4903668521697280 (1)
libavcodec/adpcm.c:2758:5: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavcodec/adpcm.c:2758:5
AddressSanitizer:DEADLYSIGNAL
=================================================================
==2544903==ERROR: AddressSanitizer: FPE on unknown address 0x558399a82194 (pc 0x558399a82194 bp 0x7ffe42635ff0 sp 0x7ffe42635d20 T0)
#0 0x558399a82194 in adpcm_decode_frame /home/michael/ffmpeg-git/ffmpeg/libavcodec/adpcm.c:2758:5
#1 0x558399ae725a in decode_simple_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:444:16
#2 0x558399ae725a in decode_simple_receive_frame /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:604:15
#3 0x558399ae725a in ff_decode_receive_frame_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:640:15
#4 0x558399aed34d in decode_receive_frame_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:658:15
#5 0x558399aeccef in avcodec_send_packet /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:734:15
#6 0x558399a75f39 in LLVMFuzzerTestOneInput /home/michael/ffmpeg-git/ffmpeg/tools/target_dec_fuzzer.c:560:25
#7 0x55839a81e5aa in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1ddb5aa) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
#8 0x55839a80507a in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc207a) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
#9 0x55839a80acd4 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc7cd4) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
#10 0x55839a804cc3 in main (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc1cc3) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
#11 0x774af882a1c9 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
#12 0x774af882a28a in __libc_start_main csu/../csu/libc-start.c:360:3
#13 0x558399986514 in _start (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0xf43514) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
==2544903==Register values:
rax = 0x00000000000003f9 rbx = 0x00007ffe42635d20 rcx = 0x0000000000000000 rdx = 0x0000000000000000
rdi = 0x00007ffe42635078 rsi = 0x0000000000000000 rbp = 0x00007ffe42635ff0 rsp = 0x00007ffe42635d20
r8 = 0x000000000000007c r9 = 0x0000000000000000 r10 = 0xafffff00000fffff r11 = 0x0000000000000246
r12 = 0x00000000800003f9 r13 = 0x0000749af79e02c0 r14 = 0x00000000000003f9 r15 = 0x0000000000000000
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/michael/ffmpeg-git/ffmpeg/libavcodec/adpcm.c:2758:5 in adpcm_decode_frame
==2544903==ABORTING
Metadata
Metadata
Assignees
Labels
No labels