Skip to content

[oss-fuzz 5529384154103808] leak in ogg demuxer

Ref.:

INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 3143142340
INFO: Loaded 1 modules   (74301 inline 8-bit counters): 74301 [0x55e9df229a88, 0x55e9df23bcc5),
INFO: Loaded 1 PC tables (74301 PCs): 74301 [0x55e9df23bcc8,0x55e9df35e098),
/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_vlc_8f98ce4aa4498db36bdafd2ab37989a4592ed90c/revisions/vlc-demux-dec-libfuzzer-ogg: Running 1 inputs 100 time(s) each.
Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/leak-cf7fb402c20ff6271a32a5a4a698d013bc078a0d

=================================================================
==402==ERROR: LeakSanitizer: detected memory leaks

Direct leak of 537 byte(s) in 1 object(s) allocated from:
    #0 0x55e9de8f8214 in __interceptor_malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:67:3
    #1 0x55e9dec2af4c in xiph_PackHeaders /src/vlc/modules/demux/xiph.h:180:14
    #2 0x55e9dec2af4c in xiph_AppendHeaders /src/vlc/modules/demux/xiph.h:231:9
    #3 0x55e9dec2af4c in Ogg_DecodePacket /src/vlc/modules/demux/ogg.c:1413:18
    #4 0x55e9dec2af4c in Demux /src/vlc/modules/demux/ogg.c:591:13
    #5 0x55e9de93c9fb in demux_process_stream /src/vlc/test/src/input/demux-run.c:312:19
    #6 0x55e9de93c0ef in LLVMFuzzerTestOneInput /src/vlc/test/vlc-demux-libfuzzer.c:63:5
    #7 0x55e9de7d98bd in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:619:13
    #8 0x55e9de7c4632 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:329:6
    #9 0x55e9de7ca500 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:865:9
    #10 0x55e9de7f6032 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #11 0x7e706dfd1082 in __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/libc-start.c:308:16

================================================================================
The following leaks are not necessarily related to the first leak.


SUMMARY: AddressSanitizer: 537 byte(s) leaked in 1 allocation(s).

INFO: a leak has been found in the initial corpus.

INFO: to ignore leaks on libFuzzer side use -detect_leaks=0.

Samples:

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information