Wild-addr-write in vcf_parse_format

```
Running: fusiontest-testcase-hts_open_fuzzer-202108110005
[W::vcf_parse] Contig '@SQ' is not defined in the header. (Quick workaround: index the file with tabix.)
[W::vcf_parse] FILTER 'AF:dx##' is not defined in the header
[W::vcf_parse] INFO 'L¯:S´Q' is not defined in the header, assuming Type=String
[W::vcf_parse_format] FORMAT 'AN' is not defined in the header, assuming Type=String
[W::vcf_parse_format] FORMAT '՛*AN' is not defined in the header, assuming Type=String
[W::vcf_parse_format] FORMAT '՛*@Sϧ is not defined in the header, assuming Type=String
AddressSanitizer:DEADLYSIGNAL
=================================================================
==1733291==ERROR: AddressSanitizer: SEGV on unknown address 0x7f4a5fa040f8 (pc 0x0000005ec236 bp 0x7fff7e74c0d0 sp 0x7fff7e74bf60 T0)
==1733291==The signal is caused by a WRITE memory access.
SCARINESS: 30 (wild-addr-write)
    #0 0x5ec236 in vcf_parse_format /src/htslib/vcf.c:2461:41
    #1 0x5e8cea in vcf_parse /src/htslib/vcf.c:2822:20
    #2 0x5de84d in vcf_read /src/htslib/vcf.c:2840:12
    #3 0x5de71d in bcf_read /src/htslib/vcf.c:1484:42
    #4 0x5584ed in view_vcf /src/htslib/test/fuzz/hts_open_fuzzer.c:107:12
    #5 0x558224 in LLVMFuzzerTestOneInput /src/htslib/test/fuzz/hts_open_fuzzer.c:144:13
    #6 0x45d2a3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #7 0x448a12 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #8 0x44e6de in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #9 0x478192 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #10 0x7f4be5e3cb26 in __libc_start_main (/lib64/libc.so.6+0x25b26)
    #11 0x4244b9 in _start (/opt/oss-fuzz/build/out/htslib/hts_open_fuzzer+0x4244b9)

DEDUP_TOKEN: vcf_parse_format--vcf_parse--vcf_read
AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /src/htslib/vcf.c:2461:41 in vcf_parse_format
==1733291==ABORTING
```

src-openEuler/htslib

内容风险标识

评论 (2)

src-openEuler/htslib .gitee-modal { width: 500px !important; }

内容风险标识