PSPP-BUG: [bug #61281] segv in pspp at src/language/lexer/segment.c:1350

[Irfan Ariq]

URL:
  <https://savannah.gnu.org/bugs/?61281>

                 Summary: segv in pspp at src/language/lexer/segment.c:1350
                 Project: PSPP
            Submitted by: irfanariq
            Submitted on: Mon 04 Oct 2021 03:33:35 PM UTC
                Category: None
                Severity: 5 - Average
                  Status: None
             Assigned to: None
             Open/Closed: Open
                 Release: None
         Discussion Lock: Any
                  Effort: 0.00

    _______________________________________________________

Details:

Hello,

We are currently working on fuzz testing feature, and we found a **SEGV** on
`pspp`.

The stack traces are as follow:
```st
==29998==ERROR: AddressSanitizer: SEGV on unknown address 0x617000010000 (pc
0x7febab786480 bp 0x7fffe47487e0 sp 0x7fffe4747f58 T0)
==29998==The signal is caused by a READ memory access.
    #0 0x7febab78647f  (/lib/x86_64-linux-gnu/libc.so.6+0x18a47f)
    #1 0x7febacc285a1  (/usr/lib/x86_64-linux-gnu/libasan.so.4+0x415a1)
    #2 0x7febac823c9c in segmenter_parse_full_line__
src/language/lexer/segment.c:1350
    #3 0x7febac82447f in segmenter_parse_begin_data_3__
src/language/lexer/segment.c:1466
    #4 0x7febac825071 in segmenter_push src/language/lexer/segment.c:1677
    #5 0x7febac816f98 in lex_source_get__ src/language/lexer/lexer.c:1376
    #6 0x7febac81246c in lex_get src/language/lexer/lexer.c:229
    #7 0x7febac9124eb in read_inline_record
src/language/data-io/data-reader.c:227
    #8 0x7febac913bab in read_record src/language/data-io/data-reader.c:538
    #9 0x7febac913c5c in dfm_eof src/language/data-io/data-reader.c:557
    #10 0x7febac91064d in parse_delimited_no_span
src/language/data-io/data-parser.c:622
```
The full stack trace is attached.

**Step to reproduce**

We configured `pspp` using `CFLAGS="-g -O0 -fsanitize=address" CXXFLAGS="-g
-O0 -fsanitize=address" ./configure --prefix=$(pwd)/ --without-cairo
--without-perl-module` and build it using `make -j10`, and run it with:

```
./pspp -o -O <attached file>
```
The input file is attached.

**Environment**
- OS: Ubuntu 18.04.5 LTS
- GCC version: gcc 7.5.0
- pspp version: [pspp
1.4.1](http://mirror.yongbok.net/gnu/pspp/pspp-1.4.1.tar.gz)

Thank you.



    _______________________________________________________

File Attachments:


-------------------------------------------------------
Date: Mon 04 Oct 2021 03:33:35 PM UTC  Name: full_stacktrace_poc_8.zip  Size:
1KiB   By: irfanariq

<http://savannah.gnu.org/bugs/download.php?file_id=52021>
-------------------------------------------------------
Date: Mon 04 Oct 2021 03:33:35 PM UTC  Name: input_pspp_poc_8.zip  Size: 320B 
 By: irfanariq

<http://savannah.gnu.org/bugs/download.php?file_id=52022>

    _______________________________________________________

Reply to this item at:

  <https://savannah.gnu.org/bugs/?61281>

_______________________________________________
  Message sent via Savannah
  https://savannah.gnu.org/