Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

A stack overflow vulnerability was found #2591

Closed
MageWeiG opened this issue May 28, 2024 · 1 comment
Closed

A stack overflow vulnerability was found #2591

MageWeiG opened this issue May 28, 2024 · 1 comment

Comments

@MageWeiG
Copy link

When I was using oss-fuzz to test the fuzzer wgsl_parser in my project, I found a stack overflow vulnerability that could trigger a crash by typing enough '(' into the fuzzer.
The crash information is as follows:

=================================================================
==132416==ERROR: AddressSanitizer: stack-overflow on address 0x7fffadaa5ee0 (pc 0x555b4f7ab900 bp 0x7fffadaa64f0 sp 0x7fffadaa5ee0 T0)
    #0 0x555b4f7ab900 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs
    #1 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #2 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #3 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #4 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #5 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #6 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #7 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #8 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #9 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #10 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #11 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #12 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #13 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #14 0x555b4f7a65f9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ab282502cd47b27 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:896:25
    #15 0x555b4f7a65f9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h6e55776d754ff865 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #16 0x555b4f7a91b9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::h6c989bb92b53e79c /src/wgpu/naga/src/front/wgsl/parse/mod.rs:888:17
    #17 0x555b4f7a91b9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hd580949c24cf7bb8 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #18 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression_with_span::hcc90cbee76e0cc50 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:880:22
    #19 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #20 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #21 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #22 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
    #23 0x555b4f7a0e04 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::ha1ecfa7432ce2a18 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:852:62
    #24 0x555b4f7a0e04 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h11097d75ca1d4c90 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #25 0x555b4f7abd37 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h0b29f2891687a004 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:838:41
    #26 0x555b4f7abd37 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #27 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #28 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #29 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #30 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #31 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #32 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #33 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #34 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #35 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #36 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #37 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #38 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #39 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #40 0x555b4f7a65f9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ab282502cd47b27 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:896:25
    #41 0x555b4f7a65f9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h6e55776d754ff865 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #42 0x555b4f7a91b9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::h6c989bb92b53e79c /src/wgpu/naga/src/front/wgsl/parse/mod.rs:888:17
    #43 0x555b4f7a91b9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hd580949c24cf7bb8 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #44 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression_with_span::hcc90cbee76e0cc50 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:880:22
    #45 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #46 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #47 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #48 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
    #49 0x555b4f7a0e04 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::ha1ecfa7432ce2a18 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:852:62
    #50 0x555b4f7a0e04 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h11097d75ca1d4c90 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #51 0x555b4f7abd37 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h0b29f2891687a004 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:838:41
    #52 0x555b4f7abd37 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #53 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #54 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #55 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #56 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #57 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #58 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #59 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #60 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #61 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #62 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #63 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #64 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #65 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #66 0x555b4f7a65f9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ab282502cd47b27 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:896:25
    #67 0x555b4f7a65f9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h6e55776d754ff865 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #68 0x555b4f7a91b9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::h6c989bb92b53e79c /src/wgpu/naga/src/front/wgsl/parse/mod.rs:888:17
    #69 0x555b4f7a91b9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hd580949c24cf7bb8 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #70 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression_with_span::hcc90cbee76e0cc50 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:880:22
    #71 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #72 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #73 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #74 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
    #75 0x555b4f7a0e04 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::ha1ecfa7432ce2a18 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:852:62
    #76 0x555b4f7a0e04 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h11097d75ca1d4c90 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #77 0x555b4f7abd37 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h0b29f2891687a004 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:838:41
    #78 0x555b4f7abd37 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #79 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #80 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #81 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #82 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #83 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #84 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #85 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #86 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #87 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #88 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #89 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #90 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #91 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #92 0x555b4f7a65f9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ab282502cd47b27 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:896:25
    #93 0x555b4f7a65f9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h6e55776d754ff865 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #94 0x555b4f7a91b9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::h6c989bb92b53e79c /src/wgpu/naga/src/front/wgsl/parse/mod.rs:888:17
    #95 0x555b4f7a91b9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hd580949c24cf7bb8 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #96 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression_with_span::hcc90cbee76e0cc50 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:880:22
    #97 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #98 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #99 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #100 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
   ... ...
    #411 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #412 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #413 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #414 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
    #415 0x555b4f7a0e04 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::ha1ecfa7432ce2a18 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:852:62
    #416 0x555b4f7a0e04 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h11097d75ca1d4c90 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #417 0x555b4f7abd37 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h0b29f2891687a004 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:838:41
    #418 0x555b4f7abd37 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #419 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #420 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #421 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #422 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #423 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #424 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #425 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #426 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #427 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #428 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #429 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #430 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #431 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #432 0x555b4f7a65f9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ab282502cd47b27 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:896:25
    #433 0x555b4f7a65f9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h6e55776d754ff865 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #434 0x555b4f7a91b9 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::h6c989bb92b53e79c /src/wgpu/naga/src/front/wgsl/parse/mod.rs:888:17
    #435 0x555b4f7a91b9 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hd580949c24cf7bb8 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #436 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression_with_span::hcc90cbee76e0cc50 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:880:22
    #437 0x555b4f7cf542 in naga::front::wgsl::parse::Parser::general_expression::h24c377b05d599ba6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:869:9
    #438 0x555b4f7c429b in naga::front::wgsl::parse::Parser::primary_expression::h746864ee7f9c87ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:618:28
    #439 0x555b4f7cdba8 in naga::front::wgsl::parse::Parser::singular_expression::h5c3de80f367a39e0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:781:28
    #440 0x555b4f7ca423 in naga::front::wgsl::parse::Parser::unary_expression::h684e82ebbf0571d6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:766:18
    #441 0x555b4f7a0e04 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::ha1ecfa7432ce2a18 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:852:62
    #442 0x555b4f7a0e04 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h11097d75ca1d4c90 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #443 0x555b4f7abd37 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h0b29f2891687a004 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:838:41
    #444 0x555b4f7abd37 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #445 0x555b4f79f7f4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h66c0fcfdc30242ae /src/wgpu/naga/src/front/wgsl/parse/mod.rs:827:33
    #446 0x555b4f79f7f4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h07c27e2bbcec7139 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #447 0x555b4f7a39d0 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1ad4b0db731fddaf /src/wgpu/naga/src/front/wgsl/parse/mod.rs:814:25
    #448 0x555b4f7a39d0 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5c45e4063eb5f655 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #449 0x555b4f7a7bc4 in naga::front::wgsl::parse::Parser::equality_expression::_$u7b$$u7b$closure$u7d$$u7d$::h111b4739c2a0ae77 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:803:17
    #450 0x555b4f7a7bc4 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hc5c8f4d9459bbd82 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #451 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::equality_expression::h33d0d8cf0e8fbcb6 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:794:9
    #452 0x555b4f7a5049 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h1a4180951f20a413 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:923:49
    #453 0x555b4f7a5049 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h5f17ceea535d3071 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #454 0x555b4f7aa769 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h009cb1660fd1d197 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:914:41
    #455 0x555b4f7aa769 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdd8fd162d8ed00ff /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31
    #456 0x555b4f7a2409 in naga::front::wgsl::parse::Parser::general_expression_with_span::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::_$u7b$$u7b$closure$u7d$$u7d$::h55d826ced51e0164 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:904:33
    #457 0x555b4f7a2409 in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::h35ddc307bce0ceb0 /src/wgpu/naga/src/front/wgsl/parse/mod.rs:69:31

SUMMARY: AddressSanitizer: stack-overflow /src/wgpu/naga/src/front/wgsl/parse/mod.rs in naga::front::wgsl::parse::ExpressionContext::parse_binary_op::hdfb95f1d26727453
==132416==ABORTING

Attached is the test sample.
crash.zip
@teoxoy
Copy link
Member

teoxoy commented May 31, 2024

Closing as we are no longer using this tracker.

This was filled as gfx-rs/wgpu#5757.

@teoxoy teoxoy closed this as not planned Won't fix, can't repro, duplicate, stale May 31, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@teoxoy @MageWeiG