SIGABRT in bison at src/counterexample.c:272

[Irfan Ariq]

Hello,

We are currently working on fuzz testing feature, and we found a
*SIGABRT *error
on `bison`.

The stack traces are as follow:

> Program received signal SIGABRT, Aborted.
> __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
> 51 ../sysdeps/unix/sysv/linux/raise.c: No such file or directory.
> #0  __GI_raise (sig=sig@entry=6) at ../sysdeps/unix/sysv/linux/raise.c:51
> #1  0x00007ffff6a67921 in __GI_abort () at abort.c:79
> #2  0x000055555559dc79 in expand_to_conflict (start=47, conflict_sym=9) at
> src/counterexample.c:272
> #3  0x000055555559e5df in complete_diverging_example (conflict_sym=9,
> path=0x6070000bad90, derivs=0x6070000bb180) at src/counterexample.c:386
> #4  0x000055555559fbb8 in example_from_path (shift_reduce=true, itm2=37,
> shortest_path=0x6070000bad90, next_sym=9) at src/counterexample.c:541
> #5  0x00005555555a4515 in unifying_example (itm1=40, itm2=37,
> shift_reduce=true, reduce_path=0x6070000bad90, next_sym=9) at
> src/counterexample.c:1199
> #6  0x00005555555a4e05 in counterexample_report (itm1=40, itm2=37,
> next_sym=9, shift_reduce=true, out=0x616000001b80, prefix=0x5555556ec180 "
>    ") at src/counterexample.c:1277
> #7  0x00005555555a5214 in counterexample_report_shift_reduce (itm1=40,
> itm2=37, next_sym=9, out=0x616000001b80, prefix=0x5555556ec180 "    ") at
> src/counterexample.c:1306
> #8  0x00005555555a64a6 in counterexample_report_state (s=0x608000001620,
> out=0x616000001b80, prefix=0x5555556ec180 "    ") at
> src/counterexample.c:1380
> #9  0x00005555556202e1 in print_state (out=0x616000001b80,
> s=0x608000001620) at src/print.c:366
> #10 0x000055555562117b in print_results () at src/print.c:473
> #11 0x00005555555d1ee5 in main (argc=16, argv=0x7fffffffdd28) at
> src/main.c:188

The full stack trace is attched.


   - *Step to reproduce*


We configured `bison` using `*CFLAGS="-g -O0 -fsanitize=address"
./configure --prefix=$(pwd)/ --disable-shared*` and build it using `*make
-j 10*`, and run it with:

./bison -g --report=all -d --defines=error --feature=none --locations -l -v
> -k -o none -localedir--language=other --warnings=other --no-lines <attached
> file>


The input file is attached.


   - *Environment*

- OS: Ubuntu 18.04.5 LTS
- GCC version: gcc 7.5.0
- Bison version: latest commit (7c90a28) of master branch in github ([link](
https://github.com/akimd/bison/tree/7c90a28f17e97b3ec8213ff6e0b0a5d2382f8929
))

Thank you.

full_stacktrace_poc_4.zip
Description: Zip compressed data

input_bison_poc_4.zip
Description: Zip compressed data