[oss-fuzz 5314701694402560] Null-dereference · FLAC_ParseSyncInfo
Ref:
- https://oss-fuzz.com/testcase-detail/5314701694402560
 - https://oss-fuzz.com/testcase-detail/4576669580197888
 
 	[Environment] UBSAN_OPTIONS=print_stacktrace=1:silence_unsigned_overflow=1
	+----------------------------------------Release Build Stacktrace----------------------------------------+
	Command: /mnt/scratch0/clusterfuzz/resources/platform/linux/unshare -c -n /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_vlc_ec7da601ad4ba2548e708a6a10d97e34bc915675/revisions/vlc-demux-dec-libfuzzer-flac -rss_limit_mb=2560 -timeout=60 -runs=100 /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/crash-f2ed5b40679d7bcd5bcf45d6bb594439243eca21
	Time ran: 0.49056553840637207
	
	INFO: Running with entropic power schedule (0xFF, 100).
	INFO: Seed: 721287847
	INFO: Loaded 1 modules   (96380 inline 8-bit counters): 96380 [0x562fd0a24de8, 0x562fd0a3c664),
	INFO: Loaded 1 PC tables (96380 PCs): 96380 [0x562fd0a3c668,0x562fd0bb4e28),
	/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_vlc_ec7da601ad4ba2548e708a6a10d97e34bc915675/revisions/vlc-demux-dec-libfuzzer-flac: Running 1 inputs 100 time(s) each.
	Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/crash-f2ed5b40679d7bcd5bcf45d6bb594439243eca21
	packetizer/flac.h:249:22: runtime error: member access within null pointer of type 'const struct flac_stream_info'
	    #0 0x562fd04378a2 in FLAC_ParseSyncInfo /src/vlc/modules/packetizer/flac.h:249:22
	    #1 0x562fd04356b8 in Packetize /src/vlc/modules/packetizer/flac.c:376:21
	    #2 0x562fd0378f7e in GetPacketizedBlock /src/vlc/modules/demux/flac.c:227:24
	    #3 0x562fd0377e44 in Demux /src/vlc/modules/demux/flac.c:380:27
	    #4 0x562fd033345c in demux_process_stream /src/vlc/test/src/input/demux-run.c:312:19
	    #5 0x562fd0333283 in LLVMFuzzerTestOneInput /src/vlc/test/vlc-demux-libfuzzer.c:63:5
	    #6 0x562fd0295760 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13
	    #7 0x562fd02809d5 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6
	    #8 0x562fd028646f in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9
	    #9 0x562fd02b1712 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
	    #10 0x7eed68cbd082 in __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/libc-start.c:308:16
	    #11 0x562fd0278bbd in _start
	
Samples:
Edited  by Thomas Guillem