Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: P1: Critical
Fix Version/s: 5.14.0 RC1
Affects Version/s: 5.14
Component/s: GUI: Text handling
Labels:
- found_by_libfuzzer
- not_yet_verified
Environment:
Manjaro 18.1
clang 8.0.1

Commits:
524ab7b5357e66b935a42956ec365a511e62e5ed (qt/qtbase/5.15)

Description

Configure Qt with '-sanitize address' and build it.
Use this build of Qt to build the fuzzer for setMarkdown.

Run this fuzzer with the attached input file.

./setMarkdown QTBUG-78870.md

It will crash:

INFO: Seed: 1012258822
INFO: Loaded 1 modules   (208284 guards): 208284 [0x55e65b5a7410, 0x55e65b672a80), 
../setMarkdown: Running 1 inputs 1 time(s) each.
Running: QTBUG-78870.md
AddressSanitizer:DEADLYSIGNAL
=================================================================
==19925==ERROR: AddressSanitizer: SEGV on unknown address 0x55e65b1f0e7c (pc 0x55e65a50f20b bp 0x7ffca433a8b0 sp 0x7ffca433a880 T0)
==19925==The signal is caused by a WRITE memory access.
    #0 0x55e65a50f20a  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc1620a)
    #1 0x55e65a5033af  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc0a3af)
    #2 0x55e65a4fcf63  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc03f63)
    #3 0x55e65a8a3222  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xfaa222)
    #4 0x55e65a8959c3  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xf9c9c3)
    #5 0x55e65a4fcaf9  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc03af9)
    #6 0x55e65a3cc37f  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xad337f)
    #7 0x55e659be963e  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x2f063e)
    #8 0x55e659aaacd2  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1b1cd2)
    #9 0x55e659a9b244  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1a2244)
    #10 0x55e659aa3f6e  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x1aaf6e)
    #11 0x55e659a93883  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x19a883)
    #12 0x7f6f9ca40ee2  (/usr/lib/libc.so.6+0x26ee2)
    #13 0x55e659a98bdd  (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0x19fbdd)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/home/qtrob/dev/g++-9.1.0/setMarkdown/setMarkdown+0xc1620a) 
==19925==ABORTING