Hello,
We are developing a new fuzz testing feature, and it found an assertion bug in pspp.
Command to Reproduce
./pspp <input_file>
input_file is attached.
Command Output
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1: error: Bad character U+0000 in input.
1 |
poc_file:1.1-1.4: error: Unknown command `FL2@'.
1 |
poc_file:1.6: error: Bad character U+001A in input.
1 |
poc_file:1.9: error: Bad character U+0001 in input.
1 |
poc_file:1.9: error: Bad character U+0002 in input.
1 |
poc_file:1.31-1.32: error: Bad character U+FFFD in input.
1 |
poc_file:1.33-1.34: error: Bad character U+FFFD in input.
1 |
poc_file:1.35: error: Bad character U+0000 in input.
1 |
poc_file:1.37: error: Bad character U+0000 in input.
1 |
poc_file:1.37: error: Bad character U+0000 in input.
1 |
poc_file:1.37: error: Bad character U+0000 in input.
1 |
poc_file:1.37: error: Bad character U+0000 in input.
1 |
poc_file:1.38-1.39: error: Bad character U+FFFD in input.
1 |
poc_file:5.1-5.2: error: Bad character U+FFFD in input.
5 | �
| ^~
poc_file:7.1: error: Bad character U+0000 in input.
7 |
poc_file:7.1: error: Bad character U+0000 in input.
7 |
poc_file:10.4-10.22: error: Unterminated string constant.
10 | mat'o
Parameter 14 to routine source_gemm_r.h was incorrect
******************************************************
You have discovered a bug in PSPP. Please report this
to bug-gnu-pspp@gnu.org. Please include this entire
message, *plus* several lines of output just above it.
For the best chance at having the bug fixed, also
include the syntax file that triggered it and a sample
of any data file used for input.
proximate cause: Assertion Failure/Abort
version: GNU pspp 1.6.2
host_system: x86_64-pc-linux-gnu
build_system: x86_64-pc-linux-gnu
locale_dir: /home/youngseok/latest-subjects/pspp/install_main/share/locale
compiler version: 7.5.0
******************************************************
[1] 28825 abort ./pspp poc_file
Stack Trace
#0 0x00007ffff56d1e87 in __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
#1 0x00007ffff56d37f1 in __GI_abort () at abort.c:79
#2 0x00007ffff3ebefaf in cblas_xerbla () at /usr/lib/x86_64-linux-gnu/libgslcblas.so.0
#3 0x00007ffff3e919eb in cblas_dgemm () at /usr/lib/x86_64-linux-gnu/libgslcblas.so.0
#4 0x00007ffff60c1d44 in gsl_blas_dgemm () at /usr/lib/x86_64-linux-gnu/libgsl.so.23
#5 0x00007ffff6a2ae03 in matrix_expr_evaluate_mul_mat (e=0x603000006610, a=0x604000013250, b=0x604000013290) at src/language/commands/matrix.c:3339
#6 0x00007ffff6a366d4 in matrix_expr_evaluate (e=0x603000006610) at src/language/commands/matrix.c:4584
#7 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000066a0) at src/language/commands/matrix.c:4521
#8 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000066d0) at src/language/commands/matrix.c:4521
#9 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006700) at src/language/commands/matrix.c:4521
#10 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006730) at src/language/commands/matrix.c:4521
#11 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006760) at src/language/commands/matrix.c:4521
#12 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006790) at src/language/commands/matrix.c:4521
#13 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000067c0) at src/language/commands/matrix.c:4521
#14 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000067f0) at src/language/commands/matrix.c:4521
#15 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006820) at src/language/commands/matrix.c:4521
#16 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006850) at src/language/commands/matrix.c:4521
#17 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006880) at src/language/commands/matrix.c:4521
#18 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000068b0) at src/language/commands/matrix.c:4521
#19 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000068e0) at src/language/commands/matrix.c:4521
#20 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006910) at src/language/commands/matrix.c:4521
#21 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006940) at src/language/commands/matrix.c:4521
#22 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006970) at src/language/commands/matrix.c:4521
#23 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000069a0) at src/language/commands/matrix.c:4521
#24 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x6030000069d0) at src/language/commands/matrix.c:4521
#25 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006a00) at src/language/commands/matrix.c:4521
#26 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006a30) at src/language/commands/matrix.c:4521
#27 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006a60) at src/language/commands/matrix.c:4521
#28 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006a90) at src/language/commands/matrix.c:4521
#29 0x00007ffff6a34352 in matrix_expr_evaluate (e=0x603000006ac0) at src/language/commands/matrix.c:4521
#30 0x00007ffff6a3c312 in matrix_print_execute (print=0x60b0000031d0) at src/language/commands/matrix.c:5691
#31 0x00007ffff6a53859 in matrix_command_execute (cmd=0x60b0000031c0) at src/language/commands/matrix.c:8837
#32 0x00007ffff6a54df4 in cmd_matrix (lexer=0x603000000370, ds=0x612000000040) at src/language/commands/matrix.c:9134
#33 0x00007ffff690d362 in do_parse_command (lexer=0x603000000370, ds=0x612000000040, state=CMD_STATE_INITIAL) at src/language/command.c:243
#34 0x00007ffff690cd0a in cmd_parse_in_state (lexer=0x603000000370, ds=0x612000000040, state=CMD_STATE_INITIAL) at src/language/command.c:149
#35 0x00007ffff690cdda in cmd_parse (lexer=0x603000000370, ds=0x612000000040) at src/language/command.c:164
#36 0x0000555555559e7b in main (argc=2, argv=0x7fffffffe138) at src/ui/terminal/main.c:139
Environment
OS: Ubuntu 18.04
gcc: 7.5.0
pspp: 1.6.2 (master branch - git commit id 312c1f22e9740afa6b6d2eff88fb49826917f35)
Note that pspp is built with address sanitizer and several options:
CFLAGS="-fsanitize=address -g -O0" CXXFLAGS="-fsanitize=address -g -O0" \
./configure --prefix=`pwd`/install_main --without-perl-module --without-gui