Skip to content

Fuzzer solc_ossfuzz segmentation fault (nullptr deference) in Analysis::annotationContainer #16202

@gal1ium

Description

@gal1ium

Hi, we found a test case causing segmentation fault when testing with the driver solc_ossfuzz

PoC:

pragma experimental solidity;
type T(A);
function f(x: 0(0)) {}
function r(a: 0(0)) {
    6000((0 ((,0())))) =6000000000000;
}

It's passing a null pointer to the function Analysis::annotationContainer, causing a null pointer dereference.

Commit id: 9651663

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions