{"action":"closed","issue":{"url":"https://api.github.com/repos/caddyserver/caddy/issues/2852","repository_url":"https://api.github.com/repos/caddyserver/caddy","labels_url":"https://api.github.com/repos/caddyserver/caddy/issues/2852/labels{/name}","comments_url":"https://api.github.com/repos/caddyserver/caddy/issues/2852/comments","events_url":"https://api.github.com/repos/caddyserver/caddy/issues/2852/events","html_url":"https://github.com/caddyserver/caddy/issues/2852","id":516164287,"node_id":"MDU6SXNzdWU1MTYxNjQyODc=","number":2852,"title":"[FUZZIT] Crash at fuzzing target replacer","user":{"login":"fuzzit-dev[bot]","id":54058451,"node_id":"MDM6Qm90NTQwNTg0NTE=","avatar_url":"https://avatars3.githubusercontent.com/in/38335?v=4","gravatar_id":"","url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D","html_url":"https://github.com/apps/fuzzit-dev","followers_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/followers","following_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/repos","events_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/fuzzit-dev%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":165906141,"node_id":"MDU6TGFiZWwxNjU5MDYxNDE=","url":"https://api.github.com/repos/caddyserver/caddy/labels/bug","name":"bug","color":"fc2929","default":true},{"id":1436036184,"node_id":"MDU6TGFiZWwxNDM2MDM2MTg0","url":"https://api.github.com/repos/caddyserver/caddy/labels/v2","name":"v2","color":"dbd523","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2019-11-01T14:57:19Z","updated_at":"2019-11-12T02:29:53Z","closed_at":"2019-11-12T02:29:53Z","author_association":"NONE","body":"A new crash was discovered for fuzzing target replacer.\nHere is a snippet of the log:\n```\n2019/11/01 06:26:35 downloading seed\n2019/11/01 06:26:36 no seed corpus. continue...\n2019/11/01 06:26:36 downloading corpus\n2019/11/01 06:26:37 no generating corpus yet. continue...\n2019/11/01 06:26:37 downloading fuzzer\n2019/11/01 06:26:38 downloading additional corpus\n2019/11/01 06:26:38 no additional-corpus. skipping...\n2019/11/01 06:26:38 Running fuzzing with: ./fuzzer -print_final_stats=1 -exact_artifact_path=./artifact -error_exitcode=76 -max_total_time=3600 corpus additional-corpus seed -rss_limit_mb=1984\nFUZZER: INFO: Seed: 1928481133\nFUZZER: INFO: 65536 Extra Counters\nFUZZER: INFO:        0 files found in corpus\nFUZZER: INFO:        0 files found in additional-corpus\nFUZZER: INFO:        0 files found in seed\nFUZZER: INFO: -max_len is not provided; libFuzzer will not generate inputs larger than 4096 bytes\nFUZZER: INFO: A corpus is not provided, starting from an empty corpus\nFUZZER: #2\tINITED ft: 9 corp: 1/1b lim: 4 exec/s: 0 rss: 33Mb\nFUZZER: panic: runtime error: slice bounds out of range [:-1]\nFUZZER: \nFUZZER: goroutine 17 [running, locked to thread]:\nFUZZER: github.com/caddyserver/caddy/v2.(*replacer).replace(0xc0001b1f40, 0x132d23b, 0x1, 0x0, 0x0, 0x1, 0xc0001b6090, 0xc0001b1f40, 0xc0001b6080, 0xc0001b46f0)\nFUZZER: \t/home/vsts/work/1/s/gopath/src/github.com/caddyserver/caddy/replacer.go:126 +0x936\nFUZZER: github.com/caddyserver/caddy/v2.(*replacer).ReplaceAll(0xc0001b1f40, 0x132d23b, 0x1, 0x0, 0x0, 0x1, 0x0)\nFUZZER: \t/home/vsts/work/1/s/gopath/src/github.com/caddyserver/caddy/replacer.go:96 +0x80\nFUZZER: github.com/caddyserver/caddy/v2.FuzzReplacer(0x329cde0, 0x1, 0x1, 0x7ffe5912aac0)\nFUZZER: \t/home/vsts/work/1/s/gopath/src/github.com/caddyserver/caddy/replacer_fuzz.go:21 +0xb7\nFUZZER: main.LLVMFuzzerTestOneInput(0x329cde0, 0x1, 0xf4e4d8)\nFUZZER: \tgithub.com/caddyserver/caddy/v2/go.fuzz.main/main.go:35 +0x66\nFUZZER: main._cgoexpwrap_1ba9e6c56ccc_LLVMFuzzerTestOneInput(0x329cde0, 0x1, 0x13232a0)\nFUZZER: \t_cgo_gotypes.go:64 +0x37\nFUZZER: ==26== ERROR: libFuzzer: deadly signal\nFUZZER: ==26==WARNING: invalid path to external symbolizer!\nFUZZER: ==26==WARNING: Failed to use and restart external symbolizer!\nFUZZER:     #0 0x4571df  (/app/fuzzer+0x4571df)\nFUZZER:     #1 0x43580b  (/app/fuzzer+0x43580b)\nFUZZER:     #2 0x416b3b  (/app/fuzzer+0x416b3b)\nFUZZER:     #3 0x416aff  (/app/fuzzer+0x416aff)\nFUZZER:     #4 0x7fb2bbbc70df  (/lib/x86_64-linux-gnu/libpthread.so.0+0x110df)\nFUZZER:     #5 0x4b8aa0  (/app/fuzzer+0x4b8aa0)\nFUZZER: \nFUZZER: NOTE: libFuzzer has rudimentary signal handlers.\nFUZZER:       Combine libFuzzer with AddressSanitizer or similar for better crash reports.\nFUZZER: SUMMARY: libFuzzer: deadly signal\nFUZZER: MS: 4 InsertByte-EraseBytes-ChangeByte-ChangeBit-; base unit: adc83b19e793491b1c6ea0fd8b46cd9f32e592fc\nFUZZER: 0x7b,\nFUZZER: {\nFUZZER: artifact_prefix='./'; Test unit written to ./artifact\nFUZZER: Base64: ew==\nFUZZER: stat::number_of_executed_units: 216\nFUZZER: stat::average_exec_per_sec:     0\nFUZZER: stat::new_units_added:          0\nFUZZER: stat::slowest_unit_time_sec:    0\nFUZZER: stat::peak_rss_mb:              35\n2019/11/01 06:26:38 process finished with error = exit status 76\n2019/11/01 06:26:38 Exit Status: 76\n2019/11/01 06:26:39 uploading crash...\n\n```\n\nMore details can be found [here](https://app.fuzzit.dev/orgs/caddyserver-gh/targets/replacer/TMP3pLu6Qr5bnTehr5vp)\n\nCheers,\nFuzzit Bot\n"}}
{"actor":{"display_login":"mholt"}}