Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-78870

Segfault in setMarkdown when AddressSanitizer is enabled

    XMLWordPrintable

Details

    • 524ab7b5357e66b935a42956ec365a511e62e5ed (qt/qtbase/5.15)

    Description

      1. Configure Qt with '-sanitize address' and build it.
      2. Use this build of Qt to build the fuzzer for setMarkdown.
      3. Run this fuzzer with the attached input file.
        ./setMarkdown QTBUG-78870.md
        

        It will crash:

        INFO: Seed: 1012258822
        INFO: Loaded 1 modules   (208284 guards): 208284 [0x55e65b5a7410, 0x55e65b672a80), 
        ../setMarkdown: Running 1 inputs 1 time(s) each.
        Running: QTBUG-78870.md
        AddressSanitizer:DEADLYSIGNAL
        =================================================================
        ==19925==ERROR: AddressSanitizer: SEGV on unknown address 0x55e65b1f0e7c (pc 0x55e65a50f20b bp 0x7ffca433a8b0 sp 0x7ffca433a880 T0)
        ==19925==The signal is caused by a WRITE memory access.
            #0 0x55e65a50f20a  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc1620a)
            #1 0x55e65a5033af  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc0a3af)
            #2 0x55e65a4fcf63  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc03f63)
            #3 0x55e65a8a3222  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xfaa222)
            #4 0x55e65a8959c3  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xf9c9c3)
            #5 0x55e65a4fcaf9  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc03af9)
            #6 0x55e65a3cc37f  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xad337f)
            #7 0x55e659be963e  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x2f063e)
            #8 0x55e659aaacd2  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1b1cd2)
            #9 0x55e659a9b244  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1a2244)
            #10 0x55e659aa3f6e  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1aaf6e)
            #11 0x55e659a93883  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x19a883)
            #12 0x7f6f9ca40ee2  (/usr/lib/libc.so.6+0x26ee2)
            #13 0x55e659a98bdd  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x19fbdd)
        
        AddressSanitizer can not provide additional info.
        SUMMARY: AddressSanitizer: SEGV (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc1620a) 
        ==19925==ABORTING
        

      Attachments

        1. QTBUG-78870.md
          0.0 kB
        2. bug.tar.bzip2
          0.4 kB

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              srutledg Shawn Rutledge
              rlohning Robert Löhning
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There is 1 open Gerrit change