[issue31301] Python 2.7 SIGSEGV

[Serhiy Storchaka]

Changes by Serhiy Storchaka :


--
nosy: +serhiy.storchaka
resolution:  -> out of date
stage:  -> resolved
status: open -> closed

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue31301] Python 2.7 SIGSEGV

[Jakub Wilk]

Jakub Wilk added the comment:

Thanks, I can reproduce the crashes with Python 2.7.9.

The first commit that fixes them is  5d7d26c403d86e9525820d872eb3e331dbc31750, 
so I believe this is duplicate of issue25388.

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue31301] Python 2.7 SIGSEGV

[Cody Sixteen]

Cody Sixteen added the comment:

c@debian:~/tools/afl/afl-2.50b/out_python/crashes$ ls -la
total 160
drwx-- 2 c c  4096 Aug 31 00:23 .
drwx-- 5 c c  4096 Sep  3 09:04 ..
-rw--- 1 c c 29352 Aug 28 16:14 id:00,sig:11,src:00,op:havoc,rep:32
-rw--- 1 c c 62917 Aug 28 17:08 id:01,sig:11,src:00,op:havoc,rep:128
-rw--- 1 c c 15945 Aug 29 20:01 id:02,sig:11,src:00,op:havoc,rep:128
-rw--- 1 c c 34202 Aug 31 00:23 id:03,sig:11,src:00,op:havoc,rep:128
-rw--- 1 c c   641 Aug 28 16:14 README.txt
c@debian:~/tools/afl/afl-2.50b/out_python/crashes$


c@debian:~/tools/afl/afl-2.50b/out_python/crashes$ /usr/bin/python2.7 --version
Python 2.7.9
(...)
Python 2.7.9 (default, Jun 29 2016, 13:08:31)
[GCC 4.9.2] on linux2

(...)
c@debian:~/tools/afl/afl-2.50b/out_python/crashes$ gdb -q /usr/bin/python2.7
Reading symbols from /usr/bin/python2.7...(no debugging symbols found)...done.
(gdb) r id:01,sig:11,src:00,op:havoc,rep:128
Starting program: /usr/bin/python2.7 
id:01,sig:11,src:00,op:havoc,rep:128
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".

Program received signal SIGSEGV, Segmentation fault.
0x004c7334 in ?? ()
(gdb) bt full
#0  0x004c7334 in ?? ()
No symbol table info available.
#1  0x004c7178 in ?? ()
No symbol table info available.
#2  0x004c3e0a in ?? ()
No symbol table info available.
#3  0x004c34de in PyParser_ASTFromFile ()
No symbol table info available.
#4  0x004f6bfc in PyRun_FileExFlags ()
No symbol table info available.
#5  0x004f5d37 in PyRun_SimpleFileExFlags ()
No symbol table info available.
#6  0x004981cd in Py_Main ()
No symbol table info available.
#7  0x76f12b45 in __libc_start_main (main=0x497c60 , argc=2, 
argv=0x7fffe6a8, init=, fini=, 
rtld_fini=,
stack_end=0x7fffe698) at libc-start.c:287
result = 
unwind_buf = {cancel_jmp_buf = {{jmp_buf = {0, 5508890025450822687, 
4815714, 140737488348832, 0, 0, -5508890024716772321, -5508905476226917345},
  mask_was_saved = 0}}, priv = {pad = {0x0, 0x0, 0x603cd0 
<__libc_csu_init>, 0x7fffe6a8}, data = {prev = 0x0, cleanup = 0x0, 
canceltype = 6307024}}}
not_first_call = 
#8  0x00497b8b in _start ()
No symbol table info available.
(gdb)

(gdb) i r
rax0x0  0
rbx0xa17b40 10582848
rcx0x0  0
rdx0x8000   140737488355328
rsi0xa87001 11038721
rdi0xa17b40 10582848
rbp0xa87000 0xa87000
rsp0x7fffe160   0x7fffe160
r8 0x1c08000126241527054729216
r9 0x0  0
r100x7fffe26d   140737488347757
r110x1  1
r120x1  1
r130xa17b68 10582888
r140xa17ee0 10583776
r150x0  0
rip0x4c7334 0x4c7334
eflags 0x10212  [ AF IF RF ]
cs 0x33 51
ss 0x2b 43
ds 0x0  0
es 0x0  0
fs 0x0  0
gs 0x0  0
(gdb)

--

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue31301] Python 2.7 SIGSEGV

[Jakub Wilk]

Jakub Wilk added the comment:

I can't reproduce it here:

Python 2.7.13 (default, Jan 19 2017, 14:48:08) 
[GCC 6.3.0 20170118] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> import ast
>>> s = open('id%3A00,sig%3A11,src%3A00,op%3Ahavoc,rep%3A32').read()
>>> ast.parse(s)
Traceback (most recent call last):
  File "", line 1, in 
  File "/usr/lib/python2.7/ast.py", line 37, in parse
return compile(source, filename, mode, PyCF_ONLY_AST)
TypeError: compile() expected string without null bytes

--
nosy: +jwilk

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

[issue31301] Python 2.7 SIGSEGV

[Cody Sixteen]

New submission from Cody Sixteen:

During one fuzzing session I found that python2.7 will crash when parsing the 
file (attached).

Maybe you will find it useful.

--
components: Build
files: py27-sigsegv.zip
messages: 300981
nosy: cody
priority: normal
severity: normal
status: open
title: Python 2.7 SIGSEGV
type: crash
versions: Python 2.7
Added file: http://bugs.python.org/file47106/py27-sigsegv.zip

___
Python tracker 

___
___
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com