Abrt in Zend/zend_vm_execute.h:47337

```
==483244== ERROR: libFuzzer: deadly signal
    #0 0x709dd1 in __sanitizer_print_stack_trace /src/llvm-project/compiler-rt/lib/asan/asan_stack.cpp:86:3
    #1 0x6547f8 in fuzzer::PrintStackTrace() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerUtil.cpp:210:5
    #2 0x638ed3 in fuzzer::Fuzzer::CrashCallback() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:233:3
    #3 0x7fcf03a704bf  (/lib64/libpthread.so.0+0x134bf)
    #4 0x7fcf038be60a in raise (/lib64/libc.so.6+0x3960a)
    #5 0x7fcf038bf930 in abort (/lib64/libc.so.6+0x3a930)
    #6 0x7fcf038b6ec9  (/lib64/libc.so.6+0x31ec9)
    #7 0x7fcf038b6f41 in __assert_fail (/lib64/libc.so.6+0x31f41)
    #8 0xee5aa2 in ZEND_BIND_STATIC_SPEC_CV_UNUSED_HANDLER /src/php-src/Zend/zend_vm_execute.h:47337:2
    #9 0xfa7ef9 in fuzzer_execute_ex /src/php-src/sapi/fuzzer/fuzzer-execute.c:40:14
    #10 0xd4cccd in zend_call_function /src/php-src/Zend/zend_execute_API.c:895:3
    #11 0xd4e37d in zend_call_known_function /src/php-src/Zend/zend_execute_API.c:985:23
    #12 0xf7ef8c in zend_call_known_instance_method /src/php-src/Zend/zend_API.h:590:2
    #13 0xf7df20 in zend_call_known_instance_method_with_0_params /src/php-src/Zend/zend_API.h:596:2
    #14 0xf7dcb1 in zend_objects_destroy_object /src/php-src/Zend/zend_objects.c:163:3
    #15 0xf8ec69 in zend_objects_store_del /src/php-src/Zend/zend_objects_API.c:178:4
    #16 0xd79be3 in rc_dtor_func /src/php-src/Zend/zend_variables.c:57:2
    #17 0xf08cd9 in i_zval_ptr_dtor /src/php-src/Zend/zend_variables.h:44:4
    #18 0xee5763 in ZEND_BIND_STATIC_SPEC_CV_UNUSED_HANDLER /src/php-src/Zend/zend_vm_execute.h:47318:3
    #19 0xfa7ef9 in fuzzer_execute_ex /src/php-src/sapi/fuzzer/fuzzer-execute.c:40:14
    #20 0xd4cccd in zend_call_function /src/php-src/Zend/zend_execute_API.c:895:3
    #21 0xd4e37d in zend_call_known_function /src/php-src/Zend/zend_execute_API.c:985:23
    #22 0xf7ef8c in zend_call_known_instance_method /src/php-src/Zend/zend_API.h:590:2
    #23 0xf7df20 in zend_call_known_instance_method_with_0_params /src/php-src/Zend/zend_API.h:596:2
    #24 0xf7dcb1 in zend_objects_destroy_object /src/php-src/Zend/zend_objects.c:163:3
    #25 0xf8ec69 in zend_objects_store_del /src/php-src/Zend/zend_objects_API.c:178:4
    #26 0xd79be3 in rc_dtor_func /src/php-src/Zend/zend_variables.c:57:2
    #27 0xf08cd9 in i_zval_ptr_dtor /src/php-src/Zend/zend_variables.h:44:4
    #28 0xee5763 in ZEND_BIND_STATIC_SPEC_CV_UNUSED_HANDLER /src/php-src/Zend/zend_vm_execute.h:47318:3
    #29 0xfa7ef9 in fuzzer_execute_ex /src/php-src/sapi/fuzzer/fuzzer-execute.c:40:14
    #30 0xd4cccd in zend_call_function /src/php-src/Zend/zend_execute_API.c:895:3
    #31 0xd4e37d in zend_call_known_function /src/php-src/Zend/zend_execute_API.c:985:23
    #32 0xf7ef8c in zend_call_known_instance_method /src/php-src/Zend/zend_API.h:590:2
    #33 0xf7df20 in zend_call_known_instance_method_with_0_params /src/php-src/Zend/zend_API.h:596:2
    #34 0xf7dcb1 in zend_objects_destroy_object /src/php-src/Zend/zend_objects.c:163:3
    #35 0xf8ec69 in zend_objects_store_del /src/php-src/Zend/zend_objects_API.c:178:4
    #36 0xd79be3 in rc_dtor_func /src/php-src/Zend/zend_variables.c:57:2
    #37 0xde19ce in zval_ptr_dtor_nogc /src/php-src/Zend/zend_variables.h:35:3
    #38 0xe60be4 in ZEND_FREE_SPEC_TMPVAR_HANDLER /src/php-src/Zend/zend_vm_execute.h:14086:2
    #39 0xfa7ef9 in fuzzer_execute_ex /src/php-src/sapi/fuzzer/fuzzer-execute.c:40:14
    #40 0xde74d6 in zend_execute /src/php-src/Zend/zend_vm_execute.h:58856:2
    #41 0xfa8949 in fuzzer_do_request_from_buffer /src/php-src/sapi/fuzzer/fuzzer-sapi.c:259:5
    #42 0xfa7d9b in LLVMFuzzerTestOneInput /src/php-src/sapi/fuzzer/fuzzer-execute.c:69:2
    #43 0x63a673 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #44 0x625de2 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #45 0x62ba86 in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #46 0x654f92 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #47 0x7fcf038aab26 in __libc_start_main (/lib64/libc.so.6+0x25b26)
    #48 0x601c99 in _start (/root/oss-fuzz/build/out/php/php-fuzz-execute+0x601c99)

NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
```

src-openEuler/php
关闭

内容风险标识

评论 (2)

src-openEuler/php关闭 .gitee-modal { width: 500px !important; }

内容风险标识