FuzzAnything / Hopper

Hopper is a tool for generating fuzzing test cases for libraries automatically using interpretative fuzzing.
Other
232 stars 29 forks source link

hopper fuzz application panicked during c-ares fuzz testing #26

Open doffice opened 3 months ago

doffice commented 3 months ago

The application panicked (crashed). Message: index out of bounds: the len is 8192 but the index is 8192 Location: hopper-core/src/feedback/instr.rs:191

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ BACKTRACE ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ⋮ 6 frames hidden ⋮
7: core::panicking::panic_bounds_check::ha28980b0cc493af1 at : 8: <hopper::feedback::instr::ShmBufIter as core::iter::traits::iterator::Iterator>::next::hb7156ba851ceab66 at : 9: hopper::feedback::mem::::get_fd_list::h905806b5384eb1be at : 10: hopper::fuzz::infer::res::::crash_infer_resource_exhaustion::h3e311efffa45f7d5 at : 11: hopper::fuzz::infer::::timeout_infer::h40cbb58d174fb3a8 at : 12: hopper::fuzzer::Fuzzer::handle_new_crash::h258e4917e49ba450 at : 13: hopper::fuzzer::Fuzzer::run_program::h9dbd2439772b8c4b at : 14: hopper::fuzzer::Fuzzer::fuzz_loop::h3189c5566a7554e7 at : 15: hopper::run_fuzzer::hc30f27f42ff29336 at : 16: hopper_fuzzer::main::heefe7a8b9d0345e5 at : 17: std::sys_common::backtrace::rust_begin_short_backtrace::h0e9d2824653e13f1 at : 18: std::rt::lang_start::{{closure}}::h59af93d5324d0725 at : 19: std::rt::lang_start_internal::h63a185b0ddd212e9 at : 20: main at : 21: libc_start_main at : 22: _start at :

spinpx commented 3 months ago

Hi, dofiice, could you provide the timeout input for interface? And which version of c-ares and environment you are using?

doffice commented 3 months ago

Hi, dofiice, could you provide the timeout input for interface? And which version of c-ares and environment you are using?

Hello, spinpx, I'm not sure where to find the timeout input for the interface. However, I can provide additional information: c-ares version : 1.32.3 environment : container built by Dockerfile