Skip to content

Commit 0cc5eaa

Browse files
committed
Added another crash, found by afl-fuzz.
1 parent 5066ac7 commit 0cc5eaa

File tree

2 files changed

+80
-0
lines changed

2 files changed

+80
-0
lines changed

crash485.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{typedef typedef c n00e0[]c000(;n00e0&c000)}

crash485_bt.txt

Lines changed: 79 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
backtrace:
2+
#0 0x00005555556a0c29 in Token::insertToken(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) ()
3+
No symbol table info available.
4+
#1 0x00005555556ca4c0 in Tokenizer::simplifyTypedef() ()
5+
No symbol table info available.
6+
#2 0x00005555556dab73 in Tokenizer::simplifyTokenList1(char const*) ()
7+
No symbol table info available.
8+
#3 0x00005555556dafb8 in Tokenizer::simplifyTokens1(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
9+
No symbol table info available.
10+
#4 0x00005555556562df in CppCheck::checkFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::istream&) ()
11+
No symbol table info available.
12+
#5 0x0000555555658329 in CppCheck::check(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
13+
No symbol table info available.
14+
#6 0x00005555556fa8d6 in CppCheckExecutor::check_internal(CppCheck&, int, char const* const*) ()
15+
No symbol table info available.
16+
#7 0x00005555556fb145 in CppCheckExecutor::check(int, char const* const*) ()
17+
No symbol table info available.
18+
#8 0x00005555555b61ec in main ()
19+
No symbol table info available.
20+
21+
22+
registers:
23+
rax 0x0 0
24+
rbx 0x7fffffffbdc8 140737488338376
25+
rcx 0x0 0
26+
rdx 0x55555596be60 93824996523616
27+
rsi 0x7fffffffbdc8 140737488338376
28+
rdi 0x0 0
29+
rbp 0x5555559b0dd0 0x5555559b0dd0
30+
rsp 0x7fffffffbc40 0x7fffffffbc40
31+
r8 0x1 1
32+
r9 0xf 15
33+
r10 0x555555973010 93824996552720
34+
r11 0x0 0
35+
r12 0x0 0
36+
r13 0x0 0
37+
r14 0x7fffffffbdc8 140737488338376
38+
r15 0x5555559b09d0 93824996805072
39+
rip 0x5555556a0c29 0x5555556a0c29 <Token::insertToken(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool)+29>
40+
eflags 0x10246 [ PF ZF IF RF ]
41+
cs 0x33 51
42+
ss 0x2b 43
43+
ds 0x0 0
44+
es 0x0 0
45+
fs 0x0 0
46+
gs 0x0 0
47+
48+
49+
current instructions:
50+
=> 0x5555556a0c29 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+29>: cmpq $0x0,0x10(%rdi)
51+
0x5555556a0c2e <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+34>: mov %rdx,%r12
52+
0x5555556a0c31 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+37>: mov %rdi,%rbp
53+
0x5555556a0c34 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+40>: mov %rdi,%rbx
54+
0x5555556a0c37 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+43>: je 0x5555556a0c52 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+70>
55+
0x5555556a0c39 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+45>: mov $0xa0,%edi
56+
0x5555556a0c3e <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+50>: callq 0x5555555ad3b0 <_Znwm@plt>
57+
0x5555556a0c43 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+55>: mov 0x0(%rbp),%rsi
58+
0x5555556a0c47 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+59>: mov %rax,%rdi
59+
0x5555556a0c4a <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+62>: mov %rax,%rbx
60+
0x5555556a0c4d <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+65>: callq 0x55555569e2d8 <_ZN5TokenC2EP15TokensFrontBack>
61+
0x5555556a0c52 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+70>: lea 0x8(%rbx),%rdi
62+
0x5555556a0c56 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+74>: mov %r14,%rsi
63+
0x5555556a0c59 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+77>: callq 0x5555555ad100 <_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_assignERKS4_@plt>
64+
0x5555556a0c5e <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+82>: movl $0x0,0x50(%rbx)
65+
0x5555556a0c65 <_ZN5Token11insertTokenERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES7_b+89>: mov %rbx,%rdi
66+
67+
68+
threads backtrace:
69+
70+
Thread 1 (Thread 0x7ffff7fc6740 (LWP 2776)):
71+
#0 0x00005555556a0c29 in Token::insertToken(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, bool) ()
72+
#1 0x00005555556ca4c0 in Tokenizer::simplifyTypedef() ()
73+
#2 0x00005555556dab73 in Tokenizer::simplifyTokenList1(char const*) ()
74+
#3 0x00005555556dafb8 in Tokenizer::simplifyTokens1(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
75+
#4 0x00005555556562df in CppCheck::checkFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::istream&) ()
76+
#5 0x0000555555658329 in CppCheck::check(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
77+
#6 0x00005555556fa8d6 in CppCheckExecutor::check_internal(CppCheck&, int, char const* const*) ()
78+
#7 0x00005555556fb145 in CppCheckExecutor::check(int, char const* const*) ()
79+
#8 0x00005555555b61ec in main ()

0 commit comments

Comments
 (0)