Null dereference in kputs

```
Running: fusiontest-testcase-hts_open_fuzzer-202108110003
[W::bcf_hdr_parse] The first line should be ##fileformat; is the VCF/BCF header broken?
[W::bcf_hdr_parse] Could not parse header line: ݝۂ#(,9Ld衣+#¾film¥=FCVᾱ
[W::bcf_hdr_parse] Could not parse header line: ##igp
[W::bcf_hdr_parse] Could not parse header line:
AddressSanitizer:DEADLYSIGNAL
=================================================================
==1733177==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f8e38d1f8c1 bp 0x7fff39517770 sp 0x7fff39516f28 T0)
==1733177==The signal is caused by a READ memory access.
==1733177==Hint: address points to the zero page.
SCARINESS: 10 (null-deref)
    #0 0x7f8e38d1f8c1  (/lib64/libc.so.6+0x15b8c1)
    #1 0x4bb758 in strlen /src/llvm-project/compiler-rt/lib/asan/../sanitizer_common/sanitizer_common_interceptors.inc
    #2 0x5e33ec in kputs /src/htslib/./htslib/kstring.h:250:19
    #3 0x5ef840 in vcf_format /src/htslib/vcf.c:2951:5
    #4 0x5e3045 in vcf_write /src/htslib/vcf.c:3068:9
    #5 0x5e27f8 in bcf_write /src/htslib/vcf.c:1745:16
    #6 0x55850d in view_vcf /src/htslib/test/fuzz/hts_open_fuzzer.c:108:13
    #7 0x558224 in LLVMFuzzerTestOneInput /src/htslib/test/fuzz/hts_open_fuzzer.c:144:13
    #8 0x45d2a3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #9 0x448a12 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #10 0x44e6de in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #11 0x478192 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #12 0x7f8e38be9b26 in __libc_start_main (/lib64/libc.so.6+0x25b26)
    #13 0x4244b9 in _start (/opt/oss-fuzz/build/out/htslib/hts_open_fuzzer+0x4244b9)

DEDUP_TOKEN: strlen--kputs
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib64/libc.so.6+0x15b8c1)
==1733177==ABORTING
```

src-openEuler/htslib

内容风险标识

评论 (2)

src-openEuler/htslib .gitee-modal { width: 500px !important; }

内容风险标识