mapleFU opened a new issue, #46934: URL: https://github.com/apache/arrow/issues/46934
### Describe the bug, including details regarding any error messages, version, and platform. ``` /mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_arrow_54ac8e3130fd5b639a9b3df39d9203298c5a0908/revisions/parquet-arrow-fuzz: Running 1 inputs 100 time(s) each. -- | Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/1f8b0ef2da848c46610f19fdc1d992ee2973b4d3e528c8a60beb8a3a4497af46 | /src/arrow/cpp/src/parquet/arrow/reader_internal.cc:363:48: runtime error: load of value 115, which is not a valid value for type 'const T' (aka 'const bool') | #0 0x5cd888515b59 in AttachStatistics<arrow::BooleanType, parquet::PhysicalType<(parquet::Type::type)0> > arrow/cpp/src/parquet/arrow/reader_internal.cc:363:48 | #1 0x5cd888515b59 in TransferBool arrow/cpp/src/parquet/arrow/reader_internal.cc:469:3 | #2 0x5cd888515b59 in parquet::arrow::TransferColumnData(parquet::internal::RecordReader*, std::__1::unique_ptr<parquet::ColumnChunkMetaData, std::__1::default_delete<parquet::ColumnChunkMetaData>>, std::__1::shared_ptr<arrow::Field> const&, parquet::ColumnDescriptor const*, parquet::arrow::ReaderContext const*, std::__1::shared_ptr<arrow::ChunkedArray>*) arrow/cpp/src/parquet/arrow/reader_internal.cc:867:7 | #3 0x5cd888483c2c in parquet::arrow::(anonymous namespace)::LeafReader::LoadBatch(long) arrow/cpp/src/parquet/arrow/reader.cc:510:5 | #4 0x5cd888496719 in parquet::arrow::(anonymous namespace)::StructReader::LoadBatch(long) arrow/cpp/src/parquet/arrow/reader.cc:732:7 | #5 0x5cd888487985 in parquet::arrow::(anonymous namespace)::ListReader<int>::LoadBatch(long) arrow/cpp/src/parquet/arrow/reader.cc:600:26 | #6 0x5cd888496719 in parquet::arrow::(anonymous namespace)::StructReader::LoadBatch(long) arrow/cpp/src/parquet/arrow/reader.cc:732:7 | #7 0x5cd888487985 in parquet::arrow::(anonymous namespace)::ListReader<int>::LoadBatch(long) arrow/cpp/src/parquet/arrow/reader.cc:600:26 | #8 0x5cd88848047e in parquet::arrow::ColumnReaderImpl::NextBatch(long, std::__1::shared_ptr<arrow::ChunkedArray>*) arrow/cpp/src/parquet/arrow/reader.cc:110:5 | #9 0x5cd88849fb17 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadColumn(int, std::__1::vector<int, std::__1::allocator<int>> const&, parquet::arrow::ColumnReader*, std::__1::shared_ptr<arrow::ChunkedArray>*) arrow/cpp/src/parquet/arrow/reader.cc:286:20 | #10 0x5cd8884bcd80 in parquet::arrow::(anonymous namespace)::FileReaderImpl::DecodeRowGroups(std::__1::shared_ptr<parquet::arrow::(anonymous namespace)::FileReaderImpl>, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, arrow::internal::Executor*)::$_0::operator()(unsigned long, std::__1::shared_ptr<parquet::arrow::ColumnReaderImpl>) const arrow/cpp/src/parquet/arrow/reader.cc:1282:5 | #11 0x5cd8884ba758 in OptionalParallelForAsync<(lambda at /src/arrow/cpp/src/parquet/arrow/reader.cc:1278:22) &, std::__1::shared_ptr<parquet::arrow::ColumnReaderImpl>, std::__1::shared_ptr<arrow::ChunkedArray> > arrow/cpp/src/arrow/util/parallel.h:97:7 | #12 0x5cd8884ba758 in parquet::arrow::(anonymous namespace)::FileReaderImpl::DecodeRowGroups(std::__1::shared_ptr<parquet::arrow::(anonymous namespace)::FileReaderImpl>, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, arrow::internal::Executor*) arrow/cpp/src/parquet/arrow/reader.cc:1300:10 | #13 0x5cd888471b78 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroups(std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::shared_ptr<arrow::Table>*) arrow/cpp/src/parquet/arrow/reader.cc:1261:14 | #14 0x5cd888471326 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroup(int, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::shared_ptr<arrow::Table>*) arrow/cpp/src/parquet/arrow/reader.cc:323:12 | #15 0x5cd888471569 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroup(int, std::__1::shared_ptr<arrow::Table>*) arrow/cpp/src/parquet/arrow/reader.cc:327:12 | #16 0x5cd8884658e9 in parquet::arrow::internal::FuzzReader(std::__1::unique_ptr<parquet::arrow::FileReader, std::__1::default_delete<parquet::arrow::FileReader>>) arrow/cpp/src/parquet/arrow/reader.cc:1408:37 | #17 0x5cd888466420 in parquet::arrow::internal::FuzzReader(unsigned char const*, long) arrow/cpp/src/parquet/arrow/reader.cc:1433:11 | #18 0x5cd8884612f3 in LLVMFuzzerTestOneInput arrow/cpp/src/parquet/arrow/fuzz.cc:22:17 | #19 0x5cd8883c38c0 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 | #20 0x5cd8883aeb35 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6 | #21 0x5cd8883b45cf in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9 | #22 0x5cd8883df872 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 | #23 0x7cc2ab56d082 in __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/libc-start.c:308:16 | #24 0x5cd8883a6d1d in _start | | SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior arrow/cpp/src/parquet/arrow/reader_internal.cc:363:48 | | <br class="Apple-interchange-newline">/mnt/scratch0/clusterfuzz/bot/builds/clusterfuzz-builds_arrow_54ac8e3130fd5b639a9b3df39d9203298c5a0908/revisions/parquet-arrow-fuzz: Running 1 inputs 100 time(s) each. Running: /mnt/scratch0/clusterfuzz/bot/inputs/fuzzer-testcases/1f8b0ef2da848c46610f19fdc1d992ee2973b4d3e528c8a60beb8a3a4497af46 /src/arrow/cpp/src/parquet/arrow/reader_internal.cc:363:48: runtime error: load of value 115, which is not a valid value for type 'const T' (aka 'const bool') #0 0x5cd888515b59 in AttachStatistics<arrow::BooleanType, parquet::PhysicalType<(parquet::Type::type)0> > [arrow/cpp/src/parquet/arrow/reader_internal.cc:363](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader_internal.cc#L363):48 #1 0x5cd888515b59 in TransferBool [arrow/cpp/src/parquet/arrow/reader_internal.cc:469](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader_internal.cc#L469):3 #2 0x5cd888515b59 in parquet::arrow::TransferColumnData(parquet::internal::RecordReader*, std::__1::unique_ptr<parquet::ColumnChunkMetaData, std::__1::default_delete<parquet::ColumnChunkMetaData>>, std::__1::shared_ptr<arrow::Field> const&, parquet::ColumnDescriptor const*, parquet::arrow::ReaderContext const*, std::__1::shared_ptr<arrow::ChunkedArray>*) [arrow/cpp/src/parquet/arrow/reader_internal.cc:867](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader_internal.cc#L867):7 #3 0x5cd888483c2c in parquet::arrow::(anonymous namespace)::LeafReader::LoadBatch(long) [arrow/cpp/src/parquet/arrow/reader.cc:510](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L510):5 #4 0x5cd888496719 in parquet::arrow::(anonymous namespace)::StructReader::LoadBatch(long) [arrow/cpp/src/parquet/arrow/reader.cc:732](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L732):7 #5 0x5cd888487985 in parquet::arrow::(anonymous namespace)::ListReader<int>::LoadBatch(long) [arrow/cpp/src/parquet/arrow/reader.cc:600](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L600):26 #6 0x5cd888496719 in parquet::arrow::(anonymous namespace)::StructReader::LoadBatch(long) [arrow/cpp/src/parquet/arrow/reader.cc:732](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L732):7 #7 0x5cd888487985 in parquet::arrow::(anonymous namespace)::ListReader<int>::LoadBatch(long) [arrow/cpp/src/parquet/arrow/reader.cc:600](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L600):26 #8 0x5cd88848047e in parquet::arrow::ColumnReaderImpl::NextBatch(long, std::__1::shared_ptr<arrow::ChunkedArray>*) [arrow/cpp/src/parquet/arrow/reader.cc:110](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L110):5 #9 0x5cd88849fb17 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadColumn(int, std::__1::vector<int, std::__1::allocator<int>> const&, parquet::arrow::ColumnReader*, std::__1::shared_ptr<arrow::ChunkedArray>*) [arrow/cpp/src/parquet/arrow/reader.cc:286](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L286):20 #10 0x5cd8884bcd80 in parquet::arrow::(anonymous namespace)::FileReaderImpl::DecodeRowGroups(std::__1::shared_ptr<parquet::arrow::(anonymous namespace)::FileReaderImpl>, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, arrow::internal::Executor*)::$_0::operator()(unsigned long, std::__1::shared_ptr<parquet::arrow::ColumnReaderImpl>) const [arrow/cpp/src/parquet/arrow/reader.cc:1282](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L1282):5 #11 0x5cd8884ba758 in OptionalParallelForAsync<(lambda at /src/arrow/cpp/src/parquet/arrow/reader.cc:1278:22) &, std::__1::shared_ptr<parquet::arrow::ColumnReaderImpl>, std::__1::shared_ptr<arrow::ChunkedArray> > [arrow/cpp/src/arrow/util/parallel.h:97](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/arrow/util/parallel.h#L97):7 #12 0x5cd8884ba758 in parquet::arrow::(anonymous namespace)::FileReaderImpl::DecodeRowGroups(std::__1::shared_ptr<parquet::arrow::(anonymous namespace)::FileReaderImpl>, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, arrow::internal::Executor*) [arrow/cpp/src/parquet/arrow/reader.cc:1300](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L1300):10 #13 0x5cd888471b78 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroups(std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::shared_ptr<arrow::Table>*) [arrow/cpp/src/parquet/arrow/reader.cc:1261](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L1261):14 #14 0x5cd888471326 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroup(int, std::__1::vector<int, std::__1::allocator<int>> const&, std::__1::shared_ptr<arrow::Table>*) [arrow/cpp/src/parquet/arrow/reader.cc:323](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L323):12 #15 0x5cd888471569 in parquet::arrow::(anonymous namespace)::FileReaderImpl::ReadRowGroup(int, std::__1::shared_ptr<arrow::Table>*) [arrow/cpp/src/parquet/arrow/reader.cc:327](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L327):12 #16 0x5cd8884658e9 in parquet::arrow::internal::FuzzReader(std::__1::unique_ptr<parquet::arrow::FileReader, std::__1::default_delete<parquet::arrow::FileReader>>) [arrow/cpp/src/parquet/arrow/reader.cc:1408](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L1408):37 #17 0x5cd888466420 in parquet::arrow::internal::FuzzReader(unsigned char const*, long) [arrow/cpp/src/parquet/arrow/reader.cc:1433](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader.cc#L1433):11 #18 0x5cd8884612f3 in LLVMFuzzerTestOneInput [arrow/cpp/src/parquet/arrow/fuzz.cc:22](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/fuzz.cc#L22):17 #19 0x5cd8883c38c0 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:614:13 #20 0x5cd8883aeb35 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:327:6 #21 0x5cd8883b45cf in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:862:9 #22 0x5cd8883df872 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10 #23 0x7cc2ab56d082 in __libc_start_main /build/glibc-LcI20x/glibc-2.31/csu/libc-start.c:308:16 #24 0x5cd8883a6d1d in _start SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior [arrow/cpp/src/parquet/arrow/reader_internal.cc:363](https://github.com/apache/arrow/blob/ed13cedd8bf7ddc06db152f97e68d86c2c37e949/cpp/src/parquet/arrow/reader_internal.cc#L363):48 ``` ### Component(s) C++, Parquet -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: issues-unsubscr...@arrow.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org