Closed zjuchenyuan closed 5 years ago
Similar output when fuzzing infotocap
:
thread '<unnamed>' panicked at 'index out of bounds: the len is 1361 but the index is 2200', /rustc/2aa4c46cfdd726e97360c2734835aa3515e8c858/src/libcore/slice/mod.rs:2455:10
note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace.
stack backtrace:
0: std::sys::unix::backtrace::tracing::imp::unwind_backtrace
at src/libstd/sys/unix/backtrace/tracing/gcc_s.rs:39
1: std::sys_common::backtrace::_print
at src/libstd/sys_common/backtrace.rs:70
2: std::panicking::default_hook::{{closure}}
at src/libstd/sys_common/backtrace.rs:58
at src/libstd/panicking.rs:200
3: std::panicking::default_hook
at src/libstd/panicking.rs:215
4: std::panicking::rust_panic_with_hook
at src/libstd/panicking.rs:478
5: std::panicking::continue_panic_fmt
at src/libstd/panicking.rs:385
6: rust_begin_unwind
at src/libstd/panicking.rs:312
7: core::panicking::panic_fmt
at src/libcore/panicking.rs:85
8: core::panicking::panic_bounds_check
at src/libcore/panicking.rs:61
9: angora::search::cmpfn::FnFuzz::run
10: angora::fuzz_loop::fuzz_loop
in running parallel 30 instance, only 1 of them occur this issue, the docker container only run 2962 seconds.
Did your Angora version is after committing https://github.com/AngoraFuzzer/Angora/commit/e965360c7d543a5661f76238e5ef1ab85d6514d4 ?
Well, for me, if I use export ANGORA_TAINT_RULE_LIST=/tmp/zlib_abilist.txt
, Angora will crash within 1 min.
But if I unset ANGORA_TAINT_RULE_LIST after compiling it, it won't crash in 1 min.
My Angora version is efce5e3
@Marsman1996 Could you provide me the program you are fuzzing, and how you compile and run them in detail ?
@Marsman1996 Could you provide me the program you are fuzzing, and how you compile and run them in detail ?
I'm fuzzing exiv2-0.26 like zjuchenyuan, and compile program like he said in issue 38
@Marsman1996 Could you provide me the program you are fuzzing, and how you compile and run them in detail?
I'm fuzzing exiv2-0.26 like zjuchenyuan, and compile program like he said in issue 38
Have you tried the newest version?
I will test version efce5e3 later.
seems good, thanks~
when fuzzing exiv2, some instances (not all) crashed:
which happend at about 1minute running.
besides. in my running, many warning like this are printed:
in parallel runing of 20 instance under same setting, 7 of them crashed due to this error.