Closed Daft-Wullie closed 4 years ago
pventuzelo
commented
4 years ago For analysis, here is a package with:
issue_82_proposer_slashing.zip
FYI,
ProposalsIdenticalYou can reproduce with:
../beaconfuzz_v2 debug beacon.ssz proposerslashing.ssz proposerslashing
zedt3ster
commented
4 years ago This to me looks like a duplicate of #74 , which was resolved in this PR. I'm not sure if the latest version of the pfuzz library was updated accordingly. @pventuzelo can you please rebuild the libraries and push an updated version? I suspect the one currently on master doesn't have the fix.
pventuzelo
commented
4 years ago @zedt3ster correct, with the new pfuzz lib everything is correct. close as duplicate
thanks again @Daft-Wullie
Daft-Wullie
commented
4 years ago I just got this crash again with the same filename.i am on commit a990138 and i can reproduce it reliably.
thread '<unnamed>' panicked at '[TEKU] Mismatch post', /home/beacon-fuzz/beaconfuzz_v2/libs/teku/src/util.rs:166:17
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
Traceback (most recent call last, using override)
/home/nimbus-eth2/vendor/nimbus-build-system/vendor/Nim/lib/system/excpt.nim(614) signalHandler
SIGABRT: Abnormal termination.
==1516179== ERROR: libFuzzer: fuzz target exited
#0 0x55c3c5eec791 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xe45791)
#1 0x55c3c89b7160 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x3910160)
#2 0x55c3c89cbecb (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x3924ecb)
#3 0x7f996f31ca26 (/lib/x86_64-linux-gnu/libc.so.6+0x49a26)
#4 0x7f996f31cbdf (/lib/x86_64-linux-gnu/libc.so.6+0x49bdf)
#5 0x55c3c678039c (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x16d939c)
#6 0x7f996f31920f (/lib/x86_64-linux-gnu/libc.so.6+0x4620f)
#7 0x7f996f31918a (/lib/x86_64-linux-gnu/libc.so.6+0x4618a)
#8 0x7f996f2f8858 (/lib/x86_64-linux-gnu/libc.so.6+0x25858)
#9 0x55c3c8a84916 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x39dd916)
#10 0x55c3c8a6d455 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x39c6455)
#11 0x55c3c89aa6a6 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x39036a6)
#12 0x55c3c8a752d5 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x39ce2d5)
#13 0x55c3c605bdf4 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xfb4df4)
#14 0x55c3c605a4b9 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xfb34b9)
#15 0x55c3c605bc94 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xfb4c94)
#16 0x55c3c61289d4 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x10819d4)
#17 0x55c3c6124b36 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x107db36)
#18 0x55c3c600e102 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xf67102)
#19 0x55c3c5f91681 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xeea681)
#20 0x55c3c89aa6d0 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x39036d0)
#21 0x55c3c89aa32f (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x390332f)
#22 0x55c3c89cc32c (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x392532c)
#23 0x55c3c899d439 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x38f6439)
#24 0x55c3c89a7232 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0x3900232)
#25 0x55c3c5e69346 (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xdc2346)
#26 0x7f996f2fa0b2 (/lib/x86_64-linux-gnu/libc.so.6+0x270b2)
#27 0x55c3c5e694ed (/home/beacon-fuzz/beaconfuzz_v2/fuzz/target/x86_64-unknown-linux-gnu/release/struct_proposer_slashing+0xdc24ed)
SUMMARY: libFuzzer: fuzz target exited
────────────────────────────────────────────────────────────────────────────────
Error: Fuzz target exited with exit code: 77@Daft-Wullie Can you open a new issue with just your comment inside (it's just to keep trace and split since it's not the same affected client).
Look like the same file is triggering an issue with teku this time @zedt3ster
I've done and provided the following:
[FUZZ]issue already refers to that crasherbeacon-fuzzversion or commit used.Info to Reproduce
Command run: e.g.
make fuzz-proposer_slashing-structCrasher file name: crash-8aca1b5ce295f678fb67bd5ea8bb36c13a0d7f20 crash-8aca1b5ce295f678fb67bd5ea8bb36c13a0d7f20.zip
Beaconstate to reproduce: a8d3de7f40c220fe927d3664d53e45ea.ssz
Client exercised: prysm(?)
Fuzzing engine used (if applicable): libfuzzer
Crash output and stacktrace
re run crasher file with
ETH2FUZZ_BEACONSTATE=../eth2fuzz/workspace/corpora/beaconstate cargo +nightly fuzz run struct_proposer_slashing fuzz/artifacts/struct_proposer_slashing/crash-8aca1b5ce295f678fb67bd5ea8bb36c13a0d7f20and gotYour Environment