Skip to content

issue 457634826 closed but still replicates #14632

@michaelni

Description

@michaelni

Many issues where today closed as verified, example this:
https://issues.oss-fuzz.com/issues/457634826

But this (and likely others) are still replicatiable locally:
The message says "If this is incorrect, please file a bug on " thus iam filing a bug here

Running: /home/michael/libfuzz-repro/457634826/clusterfuzz-testcase-minimized-ffmpeg_AV_CODEC_ID_ADPCM_PSXC_DEC_fuzzer-4903668521697280 (1)
libavcodec/adpcm.c:2758:5: runtime error: division by zero
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior libavcodec/adpcm.c:2758:5 
AddressSanitizer:DEADLYSIGNAL
=================================================================
==2544903==ERROR: AddressSanitizer: FPE on unknown address 0x558399a82194 (pc 0x558399a82194 bp 0x7ffe42635ff0 sp 0x7ffe42635d20 T0)
    #0 0x558399a82194 in adpcm_decode_frame /home/michael/ffmpeg-git/ffmpeg/libavcodec/adpcm.c:2758:5
    #1 0x558399ae725a in decode_simple_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:444:16
    #2 0x558399ae725a in decode_simple_receive_frame /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:604:15
    #3 0x558399ae725a in ff_decode_receive_frame_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:640:15
    #4 0x558399aed34d in decode_receive_frame_internal /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:658:15
    #5 0x558399aeccef in avcodec_send_packet /home/michael/ffmpeg-git/ffmpeg/libavcodec/decode.c:734:15
    #6 0x558399a75f39 in LLVMFuzzerTestOneInput /home/michael/ffmpeg-git/ffmpeg/tools/target_dec_fuzzer.c:560:25
    #7 0x55839a81e5aa in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1ddb5aa) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
    #8 0x55839a80507a in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc207a) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
    #9 0x55839a80acd4 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc7cd4) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
    #10 0x55839a804cc3 in main (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0x1dc1cc3) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)
    #11 0x774af882a1c9 in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #12 0x774af882a28a in __libc_start_main csu/../csu/libc-start.c:360:3
    #13 0x558399986514 in _start (/home/michael/ffmpeg-git/ffmpeg/tools/target_dec_adpcm_psxc_fuzzer+0xf43514) (BuildId: d88dac4061cf1e575406c713f23096c29147c8c5)

==2544903==Register values:
rax = 0x00000000000003f9  rbx = 0x00007ffe42635d20  rcx = 0x0000000000000000  rdx = 0x0000000000000000  
rdi = 0x00007ffe42635078  rsi = 0x0000000000000000  rbp = 0x00007ffe42635ff0  rsp = 0x00007ffe42635d20  
 r8 = 0x000000000000007c   r9 = 0x0000000000000000  r10 = 0xafffff00000fffff  r11 = 0x0000000000000246  
r12 = 0x00000000800003f9  r13 = 0x0000749af79e02c0  r14 = 0x00000000000003f9  r15 = 0x0000000000000000  
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/michael/ffmpeg-git/ffmpeg/libavcodec/adpcm.c:2758:5 in adpcm_decode_frame
==2544903==ABORTING

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions