Skip to content

Commit 842d4b4

Browse files
committed
Added another crash, found by afl-fuzz.
1 parent a1b0980 commit 842d4b4

File tree

2 files changed

+83
-0
lines changed

2 files changed

+83
-0
lines changed

crash481.c

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
{(- -##0xf/-1 0)[]}

crash481_bt.txt

Lines changed: 82 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,82 @@
1+
backtrace:
2+
#0 0x00005555556e5d9d in setTokenValue(Token*, ValueFlow::Value const&, Settings const*) ()
3+
No symbol table info available.
4+
#1 0x00005555556e7e27 in valueFlowSetConstantValue(Token const*, Settings const*, bool) ()
5+
No symbol table info available.
6+
#2 0x00005555556e8a4e in valueFlowNumber(TokenList*) ()
7+
No symbol table info available.
8+
#3 0x00005555556f30f5 in ValueFlow::setValues(TokenList*, SymbolDatabase*, ErrorLogger*, Settings const*) ()
9+
No symbol table info available.
10+
#4 0x00005555556dae9e in Tokenizer::simplifyTokens1(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
11+
No symbol table info available.
12+
#5 0x000055555565618f in CppCheck::checkFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::istream&) ()
13+
No symbol table info available.
14+
#6 0x00005555556581d9 in CppCheck::check(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
15+
No symbol table info available.
16+
#7 0x00005555556fa6f0 in CppCheckExecutor::check_internal(CppCheck&, int, char const* const*) ()
17+
No symbol table info available.
18+
#8 0x00005555556faf5f in CppCheckExecutor::check(int, char const* const*) ()
19+
No symbol table info available.
20+
#9 0x00005555555b609c in main ()
21+
No symbol table info available.
22+
23+
24+
registers:
25+
rax 0x8000000000000000 -9223372036854775808
26+
rbx 0x5555559ad4d0 93824996791504
27+
rcx 0xffffffffffffffff -1
28+
rdx 0xffffffffffffffff -1
29+
rsi 0x5555559ad448 93824996791368
30+
rdi 0x7fffffffb9d0 140737488337360
31+
rbp 0x7fffffffba30 0x7fffffffba30
32+
rsp 0x7fffffffb840 0x7fffffffb840
33+
r8 0xffffffff 4294967295
34+
r9 0x7fffffffb910 140737488337168
35+
r10 0x555555973010 93824996552720
36+
r11 0x0 0
37+
r12 0x7fffffffb998 140737488337304
38+
r13 0x0 0
39+
r14 0x5555559b15a0 93824996808096
40+
r15 0x7fffffffd108 140737488343304
41+
rip 0x5555556e5d9d 0x5555556e5d9d <setTokenValue(Token*, ValueFlow::Value const&, Settings const*)+2796>
42+
eflags 0x10293 [ CF AF SF IF RF ]
43+
cs 0x33 51
44+
ss 0x2b 43
45+
ds 0x0 0
46+
es 0x0 0
47+
fs 0x0 0
48+
gs 0x0 0
49+
50+
51+
current instructions:
52+
=> 0x5555556e5d9d <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2796>: idiv %rcx
53+
0x5555556e5da0 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2799>: jmpq 0x5555556e628a <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+4057>
54+
0x5555556e5da5 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2804>: movl $0x2,-0x98(%rbp)
55+
0x5555556e5daf <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2814>: divss %xmm1,%xmm0
56+
0x5555556e5db3 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2818>: jmpq 0x5555556e5d14 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2659>
57+
0x5555556e5db8 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2823>: or %r13d,%edx
58+
0x5555556e5dbb <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2826>: jne 0x5555556e629f <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+4078>
59+
0x5555556e5dc1 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2832>: mov -0x1a8(%rbp),%rax
60+
0x5555556e5dc8 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2839>: mov 0x18(%rax),%rcx
61+
0x5555556e5dcc <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2843>: test %rcx,%rcx
62+
0x5555556e5dcf <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2846>: je 0x5555556e629f <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+4078>
63+
0x5555556e5dd5 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2852>: mov 0x18(%rbx),%rax
64+
0x5555556e5dd9 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2856>: cqto
65+
0x5555556e5ddb <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2858>: idiv %rcx
66+
0x5555556e5dde <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2861>: jmpq 0x5555556e624d <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+3996>
67+
0x5555556e5de3 <_ZL13setTokenValueP5TokenRKN9ValueFlow5ValueEPK8Settings+2866>: mov -0x1b0(%rbp),%rdi
68+
69+
70+
threads backtrace:
71+
72+
Thread 1 (Thread 0x7ffff7fc6740 (LWP 34370)):
73+
#0 0x00005555556e5d9d in setTokenValue(Token*, ValueFlow::Value const&, Settings const*) ()
74+
#1 0x00005555556e7e27 in valueFlowSetConstantValue(Token const*, Settings const*, bool) ()
75+
#2 0x00005555556e8a4e in valueFlowNumber(TokenList*) ()
76+
#3 0x00005555556f30f5 in ValueFlow::setValues(TokenList*, SymbolDatabase*, ErrorLogger*, Settings const*) ()
77+
#4 0x00005555556dae9e in Tokenizer::simplifyTokens1(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
78+
#5 0x000055555565618f in CppCheck::checkFile(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&, std::istream&) ()
79+
#6 0x00005555556581d9 in CppCheck::check(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > const&) ()
80+
#7 0x00005555556fa6f0 in CppCheckExecutor::check_internal(CppCheck&, int, char const* const*) ()
81+
#8 0x00005555556faf5f in CppCheckExecutor::check(int, char const* const*) ()
82+
#9 0x00005555555b609c in main ()

0 commit comments

Comments
 (0)