systemd / systemd-dfuzzer Goto Github PK

Program received signal SIGSEGV, Segmentation fault.
__strncmp_avx2 () at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:115
115		vmovdqu	(%rdi), %ymm1
(gdb) bt
#0  __strncmp_avx2 () at ../sysdeps/x86_64/multiarch/strcmp-avx2.S:115
#1  0x00007ffff7b213a1 in process_long_option
    (argc=argc@entry=2, argv=argv@entry=0x7fffffffe288, optstring=optstring@entry=0x40917d "n:o:i:m:b:t:e:L:sdvlhV", longopts=longopts@entry=0x40aa00 <options>, longind=longind@entry=0x0, long_only=0, d=0x7ffff7c2dc80 <getopt_data>, print_errors=1, prefix=0x7ffff7be996c "--") at getopt.c:212
#2  0x00007ffff7b21d87 in _getopt_internal_r
    (argc=argc@entry=2, argv=argv@entry=0x7fffffffe288, optstring=optstring@entry=0x40917d "n:o:i:m:b:t:e:L:sdvlhV", longopts=longopts@entry=0x40aa00 <options>, longind=longind@entry=0x0, long_only=long_only@entry=0, d=0x7ffff7c2dc80 <getopt_data>, posixly_correct=0) at getopt.c:650
#3  0x00007ffff7b21ff5 in _getopt_internal
    (argc=argc@entry=2, argv=argv@entry=0x7fffffffe288, optstring=optstring@entry=0x40917d "n:o:i:m:b:t:e:L:sdvlhV", longopts=longopts@entry=0x40aa00 <options>, longind=longind@entry=0x0, long_only=long_only@entry=0, posixly_correct=0) at getopt.c:711
#4  0x00007ffff7b22082 in getopt_long
    (argc=argc@entry=2, argv=argv@entry=0x7fffffffe288, options=options@entry=0x40917d "n:o:i:m:b:t:e:L:sdvlhV", long_options=long_options@entry=0x40aa00 <options>, opt_index=opt_index@entry=0x0)
    at getopt1.c:31
#5  0x0000000000404227 in df_parse_parameters (argc=2, argv=0x7fffffffe288) at dfuzzer.c:1098
#6  0x0000000000402512 in main (argc=<optimized out>, argv=<optimized out>) at dfuzzer.c:98

[SYSTEM  BUS]
[PROCESS: /usr/lib/systemd/systemd-resolved

Thread 1 "dfuzzer" hit Breakpoint 1, df_print_process_info (pid=<optimized out>) at dfuzzer.c:971
971	                if (strstr(name, "python") != NULL || strstr(name, "perl") != NULL) {
(gdb) p name
$1 = "/usr/lib/systemd/systemd-resolved [\000;36m[SYSTEM  BUS]\033[0m\n", '\000' <repeats 3438 times>...

$ valgrind --track-origins=yes ./dfuzzer -n org.freedesktop.resolve1
==1394== Memcheck, a memory error detector
==1394== Copyright (C) 2002-2017, and GNU GPL'd, by Julian Seward et al.
==1394== Using Valgrind-3.18.1 and LibVEX; rerun with -h for copyright info
==1394== Command: ./dfuzzer -n org.freedesktop.resolve1
==1394==
[SESSION BUS]
Error: The connection does not exist.
[SYSTEM  BUS]
[PROCESS: /usr/lib/systemd/systemd-resolved
==1394== Conditional jump or move depends on uninitialised value(s)
==1394==    at 0x484F369: strstr (vg_replace_strmem.c:1772)
==1394==    by 0x4031B9: df_print_process_info (dfuzzer.c:971)
==1394==    by 0x4027DE: main (dfuzzer.c:211)
==1394==  Uninitialised value was created by a stack allocation
==1394==    at 0x40305A: df_print_process_info (dfuzzer.c:926)
==1394==
==1394== Conditional jump or move depends on uninitialised value(s)
==1394==    at 0x484F372: strstr (vg_replace_strmem.c:1772)
==1394==    by 0x4031B9: df_print_process_info (dfuzzer.c:971)
==1394==    by 0x4027DE: main (dfuzzer.c:211)
==1394==  Uninitialised value was created by a stack allocation
==1394==    at 0x40305A: df_print_process_info (dfuzzer.c:926)
==1394==
==1394== Conditional jump or move depends on uninitialised value(s)
==1394==    at 0x484F369: strstr (vg_replace_strmem.c:1772)
==1394==    by 0x4031CD: df_print_process_info (dfuzzer.c:971)
==1394==    by 0x4027DE: main (dfuzzer.c:211)
==1394==  Uninitialised value was created by a stack allocation
==1394==    at 0x40305A: df_print_process_info (dfuzzer.c:926)
==1394==
==1394== Conditional jump or move depends on uninitialised value(s)
==1394==    at 0x484F372: strstr (vg_replace_strmem.c:1772)
==1394==    by 0x4031CD: df_print_process_info (dfuzzer.c:971)
==1394==    by 0x4027DE: main (dfuzzer.c:211)
==1394==  Uninitialised value was created by a stack allocation
==1394==    at 0x40305A: df_print_process_info (dfuzzer.c:926)
==1394==