https://llvm.org/bugs/show_bug.cgi?id=25767

            Bug ID: 25767
           Summary: Seed values for LibFuzzer are read in as signed
                    integers
           Product: new-bugs
           Version: trunk
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: P
         Component: new bugs
          Assignee: unassignedb...@nondot.org
          Reporter: danielaus...@google.com
                CC: llvm-bugs@lists.llvm.org
    Classification: Unclassified

In FuzzerDriver.cpp, this happened:

#define FUZZER_FLAG_INT(Name, Default, Description) int Name;

This results in 'stol: out of range' exceptions when processing a value larger
than 2147483647. This was identified by running:

./fuzzer -seed=2574387484 

on a 32-bit ARM device (Current AOSP, Nexus 6)

Fuzzing session replay requires first checking if the generated seed value is
greater than 2147483647, and translating it to its hex representation, which
does not trigger the out of range issue.

This only seems to be an issue when using the seed flag, the seed value in
FuzzerDriver is an unsigned and appears to be handled correctly in the rest of
the library.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
llvm-bugs mailing list
llvm-bugs@lists.llvm.org
http://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-bugs

Reply via email to