Integer overflow in cram_read_slice

```
Running: fusiontest-testcase-hts_open_fuzzer-202108190010
cram/cram_io.c:3677:43: runtime error: negation of -2147483648 cannot be represented in type 'int'; cast to an unsigned type to negate this value to itself
    #0 0x562145 in cram_read_slice /src/htslib/cram/cram_io.c:3677:43
    #1 0x53724a in cram_next_slice /src/htslib/cram/cram_decode.c:3107:44
    #2 0x53695a in cram_get_seq /src/htslib/cram/cram_decode.c:3247:23
    #3 0x5377fc in cram_get_bam_seq /src/htslib/cram/cram_decode.c:3309:16
    #4 0x4f0321 in sam_read1 /src/htslib/sam.c:2882:19
    #5 0x4b239d in view_sam /src/htslib/test/fuzz/hts_open_fuzzer.c:73:12
    #6 0x4b228e in LLVMFuzzerTestOneInput /src/htslib/test/fuzz/hts_open_fuzzer.c:141:13
    #7 0x4427d3 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:599:15
    #8 0x42df42 in fuzzer::RunOneTest(fuzzer::Fuzzer*, char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:323:6
    #9 0x433c0e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:856:9
    #10 0x45d6c2 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:20:10
    #11 0x7f06e3cf9b26 in __libc_start_main (/lib64/libc.so.6+0x25b26)
    #12 0x4099e9 in _start (/opt/oss-fuzz/build/out/htslib/hts_open_fuzzer+0x4099e9)

DEDUP_TOKEN: cram_read_slice--cram_next_slice--cram_get_seq
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior cram/cram_io.c:3677:43 in
```

src-openEuler/htslib

内容风险标识

评论 (1)

src-openEuler/htslib .gitee-modal { width: 500px !important; }

内容风险标识