Package: tcc
Version: 0.9.27~git20161217.cd9514ab-3

TCC crashes on the attached file:

  $ tcc crash-dynarray_reset.c
  crash-dynarray_reset.c:2: error: ',' expected (got "˙")
  Segmentation fault

GDB says it's a null pointer dereference:

  Program received signal SIGSEGV, Segmentation fault.
  0x0804ca6a in dynarray_reset (pp=<optimized out>, n=<optimized out>) at 
libtcc.c:459
  459             if (*p)
  (gdb) print p
  $1 = (void **) 0x0

Found using American fuzzy lop:
http://lcamtuf.coredump.cx/afl/


-- System Information:
Architecture: i386

Versions of packages tcc depends on:
ii  libc6  2.24-12

Versions of packages tcc recommends:
ii  libc6-dev [libc-dev]  2.24-12

--
Jakub Wilk
t[3]={,,0

Reply via email to