Abort in basic_regex_parser.hpp:3120

```
Running: fusiontest-testcase-boost_regex_fuzzer-202108160002
boost_regex_fuzzer: ./boost/regex/v4/basic_regex_parser.hpp:3120: bool boost::re_detail_107300::basic_regex_parser<char, boost::regex_traits<char>>::unwind_alts(std::ptrdiff_t) [charT = char, traits = boost::regex_traits<char>]: Assertion `jmp->type == syntax_element_jump' failed.
AddressSanitizer:DEADLYSIGNAL
=================================================================
==1393049==ERROR: AddressSanitizer: ABRT on unknown address 0x000000154199 (pc 0x7fad9d33f60b bp 0x7fad9d489248 sp 0x7ffc7569d410 T0)
SCARINESS: 10 (signal)
    #0 0x7fad9d33f60b in raise (/lib64/libc.so.6+0x3960b)
    #1 0x7fad9d340930 in abort (/lib64/libc.so.6+0x3a930)
    #2 0x7fad9d337ec9  (/lib64/libc.so.6+0x31ec9)
    #3 0x7fad9d337f41 in __assert_fail (/lib64/libc.so.6+0x31f41)
    #4 0x575e6a in boost::re_detail_107300::basic_regex_parser<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::unwind_alts(long) /src/boost/./boost/regex/v4/basic_regex_parser.hpp:3120:7
    #5 0x5706bc in boost::re_detail_107300::basic_regex_parser<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::parse(char const*, char const*, unsigned int) /src/boost/./boost/regex/v4/basic_regex_parser.hpp:182:4
    #6 0x55aec1 in boost::re_detail_107300::basic_regex_implementation<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::assign(char const*, char const*, unsigned int) /src/boost/./boost/regex/v4/basic_regex.hpp:222:14
    #7 0x55aa62 in boost::basic_regex<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::do_assign(char const*, char const*, unsigned int) /src/boost/./boost/regex/v4/basic_regex.hpp:666:10
    #8 0x55a800 in boost::basic_regex<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::assign(char const*, char const*, unsigned int) /src/boost/./boost/regex/v4/basic_regex.hpp:387:14
    #9 0x55a76e in boost::basic_regex<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >& boost::basic_regex<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::assign<std::__1::char_traits<char>, std::__1::allocator<char> >(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, unsigned int) /src/boost/./boost/regex/v4/basic_regex.hpp:425:14
    #10 0x557d60 in boost::basic_regex<char, boost::regex_traits<char, boost::cpp_regex_traits<char> > >::basic_regex<std::__1::char_traits<char>, std::__1::allocator<char> >(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> > const&, unsigned int) /src/boost/./boost/regex/v4/basic_regex.hpp:400:7
    #11 0x557831 in LLVMFuzzerTestOneInput /src/boost/../boost_regex_fuzzer.cc:40:18
    #12 0x45c813 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #13 0x447f82 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #14 0x44dc4e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #15 0x477702 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #16 0x7fad9d32bb26 in __libc_start_main (/lib64/libc.so.6+0x25b26)
    #17 0x423a29 in _start (/opt/oss-fuzz/build/out/boost/boost_regex_fuzzer+0x423a29)

DEDUP_TOKEN: raise--abort--
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: ABRT (/lib64/libc.so.6+0x3960b) in raise
==1393049==ABORTING
```

src-openEuler/boost
关闭

内容风险标识

评论 (3)

src-openEuler/boost关闭 .gitee-modal { width: 500px !important; }

内容风险标识