-
Couldn't load subscription status.
- Fork 78
Open
Description
Hello,
I was playing with libFuzzer-based Lua fuzzer called luzer and found crash with parser:parse() call.
Crash occurs when loading crash-06d2814ffd0a9eb5be1199c7a522337efe29f805.txt file. You can use docker and fuzz targets from oss-sydr-fuzz to reproduce error:
/fuzz/stdin_parse_xml.lua < crash-06d2814ffd0a9eb5be1199c7a522337efe29f805
Stacktrace output:
lua: /usr/local/share/lua/5.1/xmlhandler/tree.lua:84: attempt to index local 'parent' (a nil value)
stack traceback:
/usr/local/share/lua/5.1/xmlhandler/tree.lua:84: in function 'reduce'
/usr/local/share/lua/5.1/xmlhandler/tree.lua:154: in function 'endtag'
/usr/local/share/lua/5.1/XmlParser.lua:335: in function 'parseNormalTag'
/usr/local/share/lua/5.1/XmlParser.lua:356: in function 'parseTagType'
/usr/local/share/lua/5.1/XmlParser.lua:428: in function 'parse'
./oss/stdin_parse_xml.lua:12: in function 'TestOneInput'
./oss/stdin_parse_xml.lua:17: in main chunk
[C]: ?
Metadata
Metadata
Assignees
Labels
No labels