Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fuzz test: crash in bytecode (mixed mode) #34683

Closed
aartbik opened this issue Oct 4, 2018 · 1 comment
Closed

Fuzz test: crash in bytecode (mixed mode) #34683

aartbik opened this issue Oct 4, 2018 · 1 comment
Assignees
Labels
area-vm Use area-vm for VM related issues, including code coverage, and the AOT and JIT backends. dartfuzz Found with Dart fuzzing (DartFuzz, libFuzzer, etc.)

Comments

@aartbik
Copy link
Contributor

aartbik commented Oct 4, 2018

Fuzzer found potential issue with mixed mode:

Dartfuzz 1.1:4257245656 (I attached file for your convenience)

To reproduce:
pkg/vm/tool/gen_kernel --gen-bytecode --platform=${DART_TOP}/out/DebugX64/vm_platform_strong.dill -o out.dill fuzz.dart

Then use the three modes

/out/DebugX64/dart --enable-interpreter --compilation-counter-threshold=-1 out.dill
/out/DebugX64/dart --enable-interpreter out.dill
/out/DebugX64/dart --use-bytecode-compiler out.dill

interpreted OK
mixed-mode CRASH
compiled OK

../../runtime/vm/object.cc: 2056: error: expected: thread->IsMutatorThread() || (space != Heap::kNew)

@aartbik aartbik added the dartfuzz Found with Dart fuzzing (DartFuzz, libFuzzer, etc.) label Oct 4, 2018
@aartbik
Copy link
Contributor Author

aartbik commented Oct 4, 2018

fuzz.dart.txt

@aartbik aartbik assigned aartbik and alexmarkov and unassigned aartbik Oct 4, 2018
@aartbik aartbik added the area-vm Use area-vm for VM related issues, including code coverage, and the AOT and JIT backends. label Oct 5, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area-vm Use area-vm for VM related issues, including code coverage, and the AOT and JIT backends. dartfuzz Found with Dart fuzzing (DartFuzz, libFuzzer, etc.)
Projects
None yet
Development

No branches or pull requests

2 participants