Closed mmcco closed 8 years ago
I honestly don't know. Whenever I'm doing debugging, I run in Xcode so that takes care of it for me. Are you using make debug
? When I've used that on *.nix with valgrind, it seems to include symbol information in the output.
Either way, please send me what you find. I've never used afl, but if it's finding input that crashes or hangs MMD, that sounds fantastic! Would love to see the test cases it discovers so I can fix them! (Unless you beat me to it, which is even better!)
Here are the current unique crashing inputs:
https://www.sccs.swarthmore.edu/users/16/mmcconv1/dump/id:000000,sig:06,src:000003,op:flip2,pos:2849
Let me know if they don't crash for you. I'm on OpenBSD, which has a bunch of memory sanitization features enabled by default. Because of this, undefined behavior related to memory access sometimes crashes on OpenBSD but not Linux, OS X, et al.
I don't have time to test these in other OS's right now, but they did not crash in 5.4.0 on Mac OS.
I just realized that I was fuzzing MultiMarkdown 5.2.0. I think these bugs may have been fixed in 5.4.0, because I can't get them to crash on OpenBSD either. I'll try fuzzing the latest version.
Thanks for your time, Mike
Well, if you find others, definitely let me know. I love fixing bugs (when I can find a fix!)
BTW -- did you get the symbolicated build working?
I haven't had time to work on it recently. I may soon, though.
I am not an expert, but everything I can test on Ubuntu linux suggests that the MMD binary is not stripped in either the release or debug form. You have to run the strip
command after the fact, or modify the CMakeLists.txt
file to perform stripping.
If you can verify this is incorrect, then I can readdress. For now will close this.
Is there an easy way to build with debug symbols?
CFLAGS='-g'
does in fact add-g
to thecc
commands, but the resulting binary doesn't have debug symbols. Maybe I'm missing something obvious, but I couldn't find anything in the docs.I'm asking because I found a couple crashing inputs using afl and want to investigate.
Thanks, Mike