null ptr deref, segfault in Perl_mro_isa_changed_in (mro_core.c:501)

[p5pRT]

Migrated from rt.perl.org#129301 (status was 'open')

Searchable as RT129301$

[p5pRT]

From @geeknik

Triggered with Perl v5.25.5 (v5.25.4-130-g7aa7bbc) and AFL+ASAN+libdislocator.

./perl -e '0<​::,%​:=0,*​::​::=​::,*​:=%0'

ASAN​:SIGSEGV

==29936==ERROR​: AddressSanitizer​: SEGV on unknown address 0x000000000004 (pc 0x000000852782 bp 0x7ffe60699710 sp 0x7ffe606995c0 T0)
  #0 0x852781 in Perl_mro_isa_changed_in /root/perl/mro_core.c​:501​:5
  #1 0x8570e4 in Perl_mro_package_moved /root/perl/mro_core.c​:877​:6
  #2 0x927f0e in Perl_sv_setsv_flags /root/perl/sv.c​:4559​:4
  #3 0x8a228e in Perl_pp_sassign /root/perl/pp_hot.c​:226​:5
  #4 0x7f4583 in Perl_runops_debug /root/perl/dump.c​:2239​:23
  #5 0x5a11c6 in S_run_body /root/perl/perl.c​:2525​:2
  #6 0x5a11c6 in perl_run /root/perl/perl.c​:2448
  #7 0x4de5fd in main /root/perl/perlmain.c​:123​:9
  #8 0x7f098f116b44 in __libc_start_main /build/glibc-uPj9cH/glibc-2.19/csu/libc-start.c​:287
  #9 0x4de26c in _start (/root/perl/perl+0x4de26c)

AddressSanitizer can not provide additional info.
SUMMARY​: AddressSanitizer​: SEGV /root/perl/mro_core.c​:501 Perl_mro_isa_changed_in
==29936==ABORTING

[p5pRT]

From @cpansprout

On Sun Sep 18 12​:50​:10 2016, brian.carpenter@​gmail.com wrote​:

Triggered with Perl v5.25.5 (v5.25.4-130-g7aa7bbc) and
AFL+ASAN+libdislocator.

./perl -e '0<​::,%​:=0,*​::​::=​::,*​:=%0'

$ ./perl -e '*​::​::=​::; *​:=%0'
Segmentation fault​: 11

--

Father Chrysostomos

[p5pRT]

The RT System itself - Status changed from 'new' to 'open'