[afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_2 ================================================================= ==3760407==ERROR: AddressSanitizer: heap-use-after-free on address 0x625000019100 at pc 0x564738172874 bp 0x7ffd9877f100 sp 0x7ffd9877f0f8 READ of size 8 at 0x625000019100 thread T0 #0 0x564738172873 in ascii_decode /src/cpython/Objects/unicodeobject.c:4474:28 #1 0x564738150e09 in unicode_decode_utf8 /src/cpython/Objects/unicodeobject.c:4541:10 #2 0x564737ebf8ad in _syntaxerror_range /src/cpython/Parser/tokenizer.c:1252:15 #3 0x564737ebca2e in syntaxerror /src/cpython/Parser/tokenizer.c:1294:15 #4 0x564737eadb08 in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c #5 0x564737eadb08 in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #6 0x564737eadb08 in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #7 0x564737dc8069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #8 0x564737e4887c in fstring_replacement_field_rule /src/cpython/Parser/parser.c:15626:31 #9 0x564737de7c29 in fstring_middle_rule /src/cpython/Parser/parser.c:15569:46 #10 0x564737de7c29 in _loop0_3_rule /src/cpython/Parser/parser.c:24878:35 #11 0x564737de7c29 in fstring_rule /src/cpython/Parser/parser.c:1334:18 #12 0x564737e2992c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #13 0x564737e2992c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #14 0x564737e2992c in strings_rule /src/cpython/Parser/parser.c:15962:34 #15 0x564737e09179 in atom_rule /src/cpython/Parser/parser.c:14388:28 #16 0x564737e0596f in primary_raw /src/cpython/Parser/parser.c:14023:25 #17 0x564737e0596f in primary_rule /src/cpython/Parser/parser.c:13820:22 #18 0x564737e0458d in await_primary_rule /src/cpython/Parser/parser.c:13773:28 #19 0x564737e039c9 in power_rule /src/cpython/Parser/parser.c:13648:18 #20 0x564737e03174 in factor_rule /src/cpython/Parser/parser.c:13597:26 #21 0x564737e018ae in term_raw /src/cpython/Parser/parser.c:13437:27 #22 0x564737e018ae in term_rule /src/cpython/Parser/parser.c:13198:22 #23 0x564737dfff27 in sum_raw /src/cpython/Parser/parser.c:13151:25 #24 0x564737dfff27 in sum_rule /src/cpython/Parser/parser.c:13029:22 #25 0x564737dfead7 in shift_expr_raw /src/cpython/Parser/parser.c:12988:24 #26 0x564737dfead7 in shift_expr_rule /src/cpython/Parser/parser.c:12866:22 #27 0x564737dfd792 in bitwise_and_raw /src/cpython/Parser/parser.c:12825:31 #28 0x564737dfd792 in bitwise_and_rule /src/cpython/Parser/parser.c:12742:22 #29 0x564737dfc5f2 in bitwise_xor_raw /src/cpython/Parser/parser.c:12701:32 #30 0x564737dfc5f2 in bitwise_xor_rule /src/cpython/Parser/parser.c:12618:22 #31 0x564737dfa7e2 in bitwise_or_raw /src/cpython/Parser/parser.c:12577:32 #32 0x564737dfa7e2 in bitwise_or_rule /src/cpython/Parser/parser.c:12494:22 #33 0x564737e17ff3 in comparison_rule /src/cpython/Parser/parser.c:11722:18 #34 0x564737e1787f in inversion_rule /src/cpython/Parser/parser.c:11672:31 #35 0x564737e16206 in conjunction_rule /src/cpython/Parser/parser.c:11548:18 #36 0x564737e0deb6 in disjunction_rule /src/cpython/Parser/parser.c:11459:18 #37 0x564737df864e in expression_rule /src/cpython/Parser/parser.c:10739:18 #38 0x564737e74b1b in except_block_rule /src/cpython/Parser/parser.c:7147:18 #39 0x564737e70e08 in _loop1_61_rule /src/cpython/Parser/parser.c:28487:33 #40 0x564737df1713 in try_stmt_rule /src/cpython/Parser/parser.c:7004:44 #41 0x564737dea038 in compound_stmt_rule /src/cpython/Parser/parser.c:2185:29 #42 0x564737de885d in statement_rule /src/cpython/Parser/parser.c:1424:18 #43 0x564737de885d in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #44 0x564737de885d in statements_rule /src/cpython/Parser/parser.c:1380:18 #45 0x564737de3fd5 in file_rule /src/cpython/Parser/parser.c:1128:18 #46 0x564737de3fd5 in _PyPegen_parse /src/cpython/Parser/parser.c:41236:18 #47 0x564737dce3d0 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:825:17 #48 0x564737dcefb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #49 0x5647384c1bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #50 0x5647384c1bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #51 0x5647384c0a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #52 0x5647384c234e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #53 0x5647385527c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #54 0x56473854f2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #55 0x56473854f2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #56 0x5647385500f3 in pymain_main /src/cpython/Modules/main.c:719:12 #57 0x564738550461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #58 0x7fbbcdb14d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #59 0x7fbbcdb14e3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #60 0x564737d09074 in _start (/src/cpython/python+0x32b074) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) 0x625000019100 is located 0 bytes inside of 8258-byte region [0x625000019100,0x62500001b142) freed by thread T0 here: #0 0x564737d8bc12 in free (/src/cpython/python+0x3adc12) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x5647380a4396 in _PyObject_Free /src/cpython/Objects/obmalloc.c:1614:9 #2 0x564737eaf02a in error_ret /src/cpython/Parser/tokenizer.c:141:9 #3 0x564737ebb33c in tok_underflow_file /src/cpython/Parser/tokenizer.c #4 0x564737ebb33c in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x564737ead82e in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c:2507:17 #6 0x564737ead82e in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #7 0x564737ead82e in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x564737dc8069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #9 0x564737e4887c in fstring_replacement_field_rule /src/cpython/Parser/parser.c:15626:31 #10 0x564737de7c29 in fstring_middle_rule /src/cpython/Parser/parser.c:15569:46 #11 0x564737de7c29 in _loop0_3_rule /src/cpython/Parser/parser.c:24878:35 #12 0x564737de7c29 in fstring_rule /src/cpython/Parser/parser.c:1334:18 #13 0x564737e2992c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #14 0x564737e2992c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #15 0x564737e2992c in strings_rule /src/cpython/Parser/parser.c:15962:34 #16 0x564737e09179 in atom_rule /src/cpython/Parser/parser.c:14388:28 #17 0x564737e0596f in primary_raw /src/cpython/Parser/parser.c:14023:25 #18 0x564737e0596f in primary_rule /src/cpython/Parser/parser.c:13820:22 #19 0x564737e0458d in await_primary_rule /src/cpython/Parser/parser.c:13773:28 #20 0x564737e039c9 in power_rule /src/cpython/Parser/parser.c:13648:18 #21 0x564737e03174 in factor_rule /src/cpython/Parser/parser.c:13597:26 #22 0x564737e018ae in term_raw /src/cpython/Parser/parser.c:13437:27 #23 0x564737e018ae in term_rule /src/cpython/Parser/parser.c:13198:22 #24 0x564737dfff27 in sum_raw /src/cpython/Parser/parser.c:13151:25 #25 0x564737dfff27 in sum_rule /src/cpython/Parser/parser.c:13029:22 #26 0x564737dfead7 in shift_expr_raw /src/cpython/Parser/parser.c:12988:24 #27 0x564737dfead7 in shift_expr_rule /src/cpython/Parser/parser.c:12866:22 #28 0x564737dfd792 in bitwise_and_raw /src/cpython/Parser/parser.c:12825:31 #29 0x564737dfd792 in bitwise_and_rule /src/cpython/Parser/parser.c:12742:22 #30 0x564737dfc5f2 in bitwise_xor_raw /src/cpython/Parser/parser.c:12701:32 #31 0x564737dfc5f2 in bitwise_xor_rule /src/cpython/Parser/parser.c:12618:22 #32 0x564737dfa7e2 in bitwise_or_raw /src/cpython/Parser/parser.c:12577:32 #33 0x564737dfa7e2 in bitwise_or_rule /src/cpython/Parser/parser.c:12494:22 #34 0x564737e17ff3 in comparison_rule /src/cpython/Parser/parser.c:11722:18 #35 0x564737e1787f in inversion_rule /src/cpython/Parser/parser.c:11672:31 #36 0x564737e16206 in conjunction_rule /src/cpython/Parser/parser.c:11548:18 #37 0x564737e0deb6 in disjunction_rule /src/cpython/Parser/parser.c:11459:18 #38 0x564737df864e in expression_rule /src/cpython/Parser/parser.c:10739:18 #39 0x564737e74b1b in except_block_rule /src/cpython/Parser/parser.c:7147:18 #40 0x564737e70e08 in _loop1_61_rule /src/cpython/Parser/parser.c:28487:33 #41 0x564737df1713 in try_stmt_rule /src/cpython/Parser/parser.c:7004:44 #42 0x564737dea038 in compound_stmt_rule /src/cpython/Parser/parser.c:2185:29 #43 0x564737de885d in statement_rule /src/cpython/Parser/parser.c:1424:18 #44 0x564737de885d in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #45 0x564737de885d in statements_rule /src/cpython/Parser/parser.c:1380:18 previously allocated by thread T0 here: #0 0x564737d8c2e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x564737ebead1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x564737eba004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x564737eba004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x564737eba004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x564737eb2d38 in tok_get_normal_mode /src/cpython/Parser/tokenizer.c:2263:17 #6 0x564737ead0fb in tok_get /src/cpython/Parser/tokenizer.c #7 0x564737ead0fb in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x564737dc8069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #9 0x564737dca739 in _PyPegen_expect_token /src/cpython/Parser/pegen.c:355:13 #10 0x564737deb9bf in _tmp_8_rule /src/cpython/Parser/parser.c:25187:25 #11 0x564737dca62a in _PyPegen_lookahead /src/cpython/Parser/pegen.c:346:24 #12 0x564737de92e1 in compound_stmt_rule /src/cpython/Parser/parser.c:2078:13 #13 0x564737de885d in statement_rule /src/cpython/Parser/parser.c:1424:18 #14 0x564737de885d in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #15 0x564737de885d in statements_rule /src/cpython/Parser/parser.c:1380:18 #16 0x564737de3fd5 in file_rule /src/cpython/Parser/parser.c:1128:18 #17 0x564737de3fd5 in _PyPegen_parse /src/cpython/Parser/parser.c:41236:18 #18 0x564737dce3d0 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:825:17 #19 0x564737dcefb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #20 0x5647384c1bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #21 0x5647384c1bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #22 0x5647384c0a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #23 0x5647384c234e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #24 0x5647385527c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #25 0x56473854f2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #26 0x56473854f2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #27 0x5647385500f3 in pymain_main /src/cpython/Modules/main.c:719:12 #28 0x564738550461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #29 0x7fbbcdb14d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) SUMMARY: AddressSanitizer: heap-use-after-free /src/cpython/Objects/unicodeobject.c:4474:28 in ascii_decode Shadow bytes around the buggy address: 0x0c4a7fffb1d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb1e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb1f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb210: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c4a7fffb220:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb230: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb240: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb270: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3760407==ABORTING [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_3 1682297706.7047718 time.struct_time(tm_year=2023, tm_mon=4, tm_mday=24, tm_hour=0, tm_min=55, tm_sec=6, tm_wday=0, tm_yday=114, tm_isdst=0) 2023 4 24 Mon Apr 24 00:55:06 2023 2023-04-24 00:55:06 time.struct_time(tm_year=2018, tm_mon=1, tm_mday=1, tm_hour=0, tm_min=0, tm_sec=0, tm_wday=0, tm_yday=1, tm_isdst=-1) Traceback (most recent call last): File "", line 36, in File "/src/cpython/Lib/shutil.py", line 421, in copy copyfile(src, dst, follow_symlinks=follow_symlinks) File "/src/cpython/Lib/shutil.py", line 258, in copyfile with open(src, 'rb') as fsrc: ^^^^^^^^^^^^^^^ FileNotFoundError: [Errno 2] No such file or directory: '/Users/Hao/hello.py' ================================================================= ==3774825==ERROR: LeakSanitizer: detected memory leaks Direct leak of 16216 byte(s) in 20 object(s) allocated from: #0 0x556d32e74ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x556d3318cc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x556d3317e06d in _PyObject_NewVar /src/cpython/Objects/object.c:324:26 #3 0x556d33031b34 in _PyCode_New /src/cpython/Objects/codeobject.c:582:24 #4 0x556d3356b2f9 in r_object /src/cpython/Python/marshal.c:1445:29 #5 0x556d33569cfe in r_object /src/cpython/Python/marshal.c:1216:18 #6 0x556d3356afa4 in r_object /src/cpython/Python/marshal.c:1385:22 #7 0x556d33569cfe in r_object /src/cpython/Python/marshal.c:1216:18 #8 0x556d3356afa4 in r_object /src/cpython/Python/marshal.c:1385:22 #9 0x556d33560933 in read_object /src/cpython/Python/marshal.c:1511:9 #10 0x556d3356e66e in marshal_loads_impl /src/cpython/Python/marshal.c:1818:14 #11 0x556d3356e66e in marshal_loads /src/cpython/Python/clinic/marshal.c.h:154:20 #12 0x556d33403fb8 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:2731:19 #13 0x556d3302800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #14 0x556d3302800e in object_vacall /src/cpython/Objects/call.c:828:14 #15 0x556d33027601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #16 0x556d33519a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #17 0x556d33519a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #18 0x556d33406349 in import_name /src/cpython/Python/ceval.c:2303:15 #19 0x556d33406349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #20 0x556d333deb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #21 0x556d333d42cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #22 0x556d333d42cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #23 0x556d331706e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #24 0x556d33021d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #25 0x556d333f2e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #26 0x556d3302800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #27 0x556d3302800e in object_vacall /src/cpython/Objects/call.c:828:14 #28 0x556d33027601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #29 0x556d33519a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #30 0x556d33519a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #31 0x556d33406349 in import_name /src/cpython/Python/ceval.c:2303:15 #32 0x556d33406349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #33 0x556d333deb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #34 0x556d333d42cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #35 0x556d333d42cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #36 0x556d331706e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #37 0x556d33021d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #38 0x556d333f2e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 Direct leak of 7616 byte(s) in 6 object(s) allocated from: #0 0x556d32e74ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x556d3318cc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x556d3313abf1 in new_keys_object /src/cpython/Objects/dictobject.c:628:14 #3 0x556d331257d4 in dictresize /src/cpython/Objects/dictobject.c:1434:19 #4 0x556d3311f104 in insertion_resize /src/cpython/Objects/dictobject.c:1179:12 #5 0x556d3311f104 in insertdict /src/cpython/Objects/dictobject.c:1246:17 #6 0x556d333f6358 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1006:23 #7 0x556d333deb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #8 0x556d333d42cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #9 0x556d333d42cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #10 0x556d331706e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #11 0x556d33021d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #12 0x556d333f2e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #13 0x556d3302800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #14 0x556d3302800e in object_vacall /src/cpython/Objects/call.c:828:14 #15 0x556d33027601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #16 0x556d33519a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #17 0x556d33519a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #18 0x556d33406349 in import_name /src/cpython/Python/ceval.c:2303:15 #19 0x556d33406349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #20 0x556d333deb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #21 0x556d333d42cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #22 0x556d333d42cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #23 0x556d331706e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #24 0x556d33021d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #25 0x556d333f2e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #26 0x556d3302800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #27 0x556d3302800e in object_vacall /src/cpython/Objects/call.c:828:14 #28 0x556d33027601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #29 0x556d33519a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #30 0x556d33519a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #31 0x556d33406349 in import_name /src/cpython/Python/ceval.c:2303:15 #32 0x556d33406349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #33 0x556d333deb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #34 0x556d333d42cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #35 0x556d333d42cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #36 0x556d331706e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #37 0x556d33021d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #38 0x556d333f2e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #39 0x556d3302800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #40 0x556d3302800e in object_vacall /src/cpython/Objects/call.c:828:14 [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_4 ================================================================= ==3794119==ERROR: AddressSanitizer: heap-use-after-free on address 0x62500000f109 at pc 0x55feb0a79508 bp 0x7ffec3b11900 sp 0x7ffec3b118f8 READ of size 1 at 0x62500000f109 thread T0 #0 0x55feb0a79507 in ascii_decode /src/cpython/Objects/unicodeobject.c:4506:28 #1 0x55feb0a57e09 in unicode_decode_utf8 /src/cpython/Objects/unicodeobject.c:4541:10 #2 0x55feb07c68ad in _syntaxerror_range /src/cpython/Parser/tokenizer.c:1252:15 #3 0x55feb07c3a2e in syntaxerror /src/cpython/Parser/tokenizer.c:1294:15 #4 0x55feb07b4b08 in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c #5 0x55feb07b4b08 in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #6 0x55feb07b4b08 in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #7 0x55feb06daafa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #8 0x55feb06d59a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #9 0x55feb06d5fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #10 0x55feb0dc8bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #11 0x55feb0dc8bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #12 0x55feb0dc7a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #13 0x55feb0dc934e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #14 0x55feb0e597c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #15 0x55feb0e562b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #16 0x55feb0e562b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #17 0x55feb0e570f3 in pymain_main /src/cpython/Modules/main.c:719:12 #18 0x55feb0e57461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #19 0x7f2439161d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #20 0x7f2439161e3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #21 0x55feb0610074 in _start (/src/cpython/python+0x32b074) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) 0x62500000f109 is located 9 bytes inside of 8207-byte region [0x62500000f100,0x62500001110f) freed by thread T0 here: #0 0x55feb06932e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x55feb07c5ad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x55feb07c1004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x55feb07c1004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x55feb07c1004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x55feb07b482e in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c:2507:17 #6 0x55feb07b482e in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #7 0x55feb07b482e in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x55feb06cf069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #9 0x55feb074f87c in fstring_replacement_field_rule /src/cpython/Parser/parser.c:15626:31 #10 0x55feb06eec29 in fstring_middle_rule /src/cpython/Parser/parser.c:15569:46 #11 0x55feb06eec29 in _loop0_3_rule /src/cpython/Parser/parser.c:24878:35 #12 0x55feb06eec29 in fstring_rule /src/cpython/Parser/parser.c:1334:18 #13 0x55feb073092c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #14 0x55feb073092c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #15 0x55feb073092c in strings_rule /src/cpython/Parser/parser.c:15962:34 #16 0x55feb0710179 in atom_rule /src/cpython/Parser/parser.c:14388:28 #17 0x55feb070c96f in primary_raw /src/cpython/Parser/parser.c:14023:25 #18 0x55feb070c96f in primary_rule /src/cpython/Parser/parser.c:13820:22 #19 0x55feb070b58d in await_primary_rule /src/cpython/Parser/parser.c:13773:28 #20 0x55feb070a9c9 in power_rule /src/cpython/Parser/parser.c:13648:18 #21 0x55feb070a174 in factor_rule /src/cpython/Parser/parser.c:13597:26 #22 0x55feb07088ae in term_raw /src/cpython/Parser/parser.c:13437:27 #23 0x55feb07088ae in term_rule /src/cpython/Parser/parser.c:13198:22 #24 0x55feb0706f27 in sum_raw /src/cpython/Parser/parser.c:13151:25 #25 0x55feb0706f27 in sum_rule /src/cpython/Parser/parser.c:13029:22 #26 0x55feb0705ad7 in shift_expr_raw /src/cpython/Parser/parser.c:12988:24 #27 0x55feb0705ad7 in shift_expr_rule /src/cpython/Parser/parser.c:12866:22 #28 0x55feb0704792 in bitwise_and_raw /src/cpython/Parser/parser.c:12825:31 #29 0x55feb0704792 in bitwise_and_rule /src/cpython/Parser/parser.c:12742:22 #30 0x55feb07035f2 in bitwise_xor_raw /src/cpython/Parser/parser.c:12701:32 #31 0x55feb07035f2 in bitwise_xor_rule /src/cpython/Parser/parser.c:12618:22 #32 0x55feb07017e2 in bitwise_or_raw /src/cpython/Parser/parser.c:12577:32 #33 0x55feb07017e2 in bitwise_or_rule /src/cpython/Parser/parser.c:12494:22 #34 0x55feb071eff3 in comparison_rule /src/cpython/Parser/parser.c:11722:18 #35 0x55feb071e87f in inversion_rule /src/cpython/Parser/parser.c:11672:31 #36 0x55feb071d206 in conjunction_rule /src/cpython/Parser/parser.c:11548:18 #37 0x55feb0714eb6 in disjunction_rule /src/cpython/Parser/parser.c:11459:18 #38 0x55feb06ff64e in expression_rule /src/cpython/Parser/parser.c:10739:18 #39 0x55feb072413f in star_expression_rule /src/cpython/Parser/parser.c:11119:31 #40 0x55feb0722691 in star_expressions_rule /src/cpython/Parser/parser.c:10958:18 #41 0x55feb074fc27 in _tmp_111_rule /src/cpython/Parser/parser.c:31761:37 #42 0x55feb074fc27 in fstring_replacement_field_rule /src/cpython/Parser/parser.c:15650:18 #43 0x55feb06eec29 in fstring_middle_rule /src/cpython/Parser/parser.c:15569:46 #44 0x55feb06eec29 in _loop0_3_rule /src/cpython/Parser/parser.c:24878:35 #45 0x55feb06eec29 in fstring_rule /src/cpython/Parser/parser.c:1334:18 #46 0x55feb073092c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #47 0x55feb073092c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #48 0x55feb073092c in strings_rule /src/cpython/Parser/parser.c:15962:34 #49 0x55feb0710179 in atom_rule /src/cpython/Parser/parser.c:14388:28 previously allocated by thread T0 here: #0 0x55feb06932e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x55feb07c5ad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x55feb07c1004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x55feb07c1004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x55feb07c1004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x55feb07b9c28 in tok_get_normal_mode /src/cpython/Parser/tokenizer.c:2263:17 #6 0x55feb07b40fb in tok_get /src/cpython/Parser/tokenizer.c #7 0x55feb07b40fb in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x55feb06cf069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #9 0x55feb06d1739 in _PyPegen_expect_token /src/cpython/Parser/pegen.c:355:13 #10 0x55feb06ee9b3 in fstring_rule /src/cpython/Parser/parser.c:1332:18 #11 0x55feb073092c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #12 0x55feb073092c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #13 0x55feb073092c in strings_rule /src/cpython/Parser/parser.c:15962:34 #14 0x55feb0710179 in atom_rule /src/cpython/Parser/parser.c:14388:28 #15 0x55feb07195b3 in t_primary_raw /src/cpython/Parser/parser.c:18640:18 #16 0x55feb07195b3 in t_primary_rule /src/cpython/Parser/parser.c:18429:22 #17 0x55feb07a3493 in single_subscript_attribute_target_rule /src/cpython/Parser/parser.c:18319:18 #18 0x55feb079f461 in _tmp_13_rule /src/cpython/Parser/parser.c:25515:54 #19 0x55feb0794f4f in assignment_rule /src/cpython/Parser/parser.c:2323:18 #20 0x55feb0794f4f in simple_stmt_rule /src/cpython/Parser/parser.c:1730:31 #21 0x55feb06f1d52 in simple_stmts_rule /src/cpython/Parser/parser.c:1625:18 #22 0x55feb06ef8d7 in statement_rule /src/cpython/Parser/parser.c:1448:34 #23 0x55feb06ef8d7 in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #24 0x55feb06ef8d7 in statements_rule /src/cpython/Parser/parser.c:1380:18 #25 0x55feb06eafd5 in file_rule /src/cpython/Parser/parser.c:1128:18 #26 0x55feb06eafd5 in _PyPegen_parse /src/cpython/Parser/parser.c:41236:18 #27 0x55feb06d53d0 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:825:17 #28 0x55feb06d5fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #29 0x55feb0dc8bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #30 0x55feb0dc8bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #31 0x55feb0dc7a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #32 0x55feb0dc934e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #33 0x55feb0e597c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #34 0x55feb0e562b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #35 0x55feb0e562b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #36 0x55feb0e570f3 in pymain_main /src/cpython/Modules/main.c:719:12 #37 0x55feb0e57461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #38 0x7f2439161d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) SUMMARY: AddressSanitizer: heap-use-after-free /src/cpython/Objects/unicodeobject.c:4506:28 in ascii_decode Shadow bytes around the buggy address: 0x0c4a7fff9dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fff9de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fff9df0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fff9e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fff9e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c4a7fff9e20: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fff9e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fff9e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fff9e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fff9e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fff9e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3794119==ABORTING [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_6 :1: SyntaxWarning: invalid escape sequence '\m' :1: SyntaxWarning: invalid escape sequence '\m' ================================================================= ==3872323==ERROR: AddressSanitizer: heap-use-after-free on address 0x625000019100 at pc 0x560da9450881 bp 0x7ffd4e7bea60 sp 0x7ffd4e7bea58 READ of size 1 at 0x625000019100 thread T0 #0 0x560da9450880 in ascii_decode /src/cpython/Objects/unicodeobject.c:4483:32 #1 0x560da942ee09 in unicode_decode_utf8 /src/cpython/Objects/unicodeobject.c:4541:10 #2 0x560da919d8ad in _syntaxerror_range /src/cpython/Parser/tokenizer.c:1252:15 #3 0x560da919aa2e in syntaxerror /src/cpython/Parser/tokenizer.c:1294:15 #4 0x560da918bb08 in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c #5 0x560da918bb08 in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #6 0x560da918bb08 in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #7 0x560da90b1afa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #8 0x560da90ac9a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #9 0x560da90acfb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #10 0x560da979fbc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #11 0x560da979fbc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #12 0x560da979ea1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #13 0x560da97a034e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #14 0x560da98307c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #15 0x560da982d2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #16 0x560da982d2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #17 0x560da982e0f3 in pymain_main /src/cpython/Modules/main.c:719:12 #18 0x560da982e461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #19 0x7f64cd48bd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #20 0x7f64cd48be3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #21 0x560da8fe7074 in _start (/src/cpython/python+0x32b074) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) 0x625000019100 is located 0 bytes inside of 8298-byte region [0x625000019100,0x62500001b16a) freed by thread T0 here: #0 0x560da906a2e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x560da919cad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x560da9198004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x560da9198004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x560da9198004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x560da918b82e in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c:2507:17 #6 0x560da918b82e in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #7 0x560da918b82e in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x560da90b1afa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #9 0x560da90ac9a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #10 0x560da90acfb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #11 0x560da979fbc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #12 0x560da979fbc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #13 0x560da979ea1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #14 0x560da97a034e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #15 0x560da98307c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #16 0x560da982d2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #17 0x560da982d2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #18 0x560da982e0f3 in pymain_main /src/cpython/Modules/main.c:719:12 #19 0x560da982e461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #20 0x7f64cd48bd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) previously allocated by thread T0 here: #0 0x560da906a2e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x560da919cad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x560da9198004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x560da9198004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x560da9198004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x560da9190d38 in tok_get_normal_mode /src/cpython/Parser/tokenizer.c:2263:17 #6 0x560da918b0fb in tok_get /src/cpython/Parser/tokenizer.c #7 0x560da918b0fb in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x560da90a6069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #9 0x560da90a8739 in _PyPegen_expect_token /src/cpython/Parser/pegen.c:355:13 #10 0x560da90c99bf in _tmp_8_rule /src/cpython/Parser/parser.c:25187:25 #11 0x560da90a862a in _PyPegen_lookahead /src/cpython/Parser/pegen.c:346:24 #12 0x560da90c72e1 in compound_stmt_rule /src/cpython/Parser/parser.c:2078:13 #13 0x560da90c685d in statement_rule /src/cpython/Parser/parser.c:1424:18 #14 0x560da90c685d in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #15 0x560da90c685d in statements_rule /src/cpython/Parser/parser.c:1380:18 #16 0x560da90c1fd5 in file_rule /src/cpython/Parser/parser.c:1128:18 #17 0x560da90c1fd5 in _PyPegen_parse /src/cpython/Parser/parser.c:41236:18 #18 0x560da90ac3d0 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:825:17 #19 0x560da90acfb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #20 0x560da979fbc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #21 0x560da979fbc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #22 0x560da979ea1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #23 0x560da97a034e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #24 0x560da98307c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #25 0x560da982d2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #26 0x560da982d2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #27 0x560da982e0f3 in pymain_main /src/cpython/Modules/main.c:719:12 #28 0x560da982e461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #29 0x7f64cd48bd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) SUMMARY: AddressSanitizer: heap-use-after-free /src/cpython/Objects/unicodeobject.c:4483:32 in ascii_decode Shadow bytes around the buggy address: 0x0c4a7fffb1d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb1e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb1f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb200: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb210: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c4a7fffb220:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb230: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb240: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb250: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb260: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb270: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3872323==ABORTING [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_7 AddressSanitizer:DEADLYSIGNAL ================================================================= ==3888115==ERROR: AddressSanitizer: SEGV on unknown address (pc 0x5570aa047c52 bp 0x7ffd8f502210 sp 0x7ffd8f502140 T0) ==3888115==The signal is caused by a READ memory access. ==3888115==Hint: this fault was caused by a dereference of a high value address (see register values below). Disassemble the provided pc to learn which register was used. #0 0x5570aa047c52 in tok_backup /src/cpython/Parser/tokenizer.c:1234:33 #1 0x5570aa047c52 in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c:2470:5 #2 0x5570aa047c52 in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #3 0x5570aa047c52 in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #4 0x5570a9f63069 in _PyPegen_fill_token /src/cpython/Parser/pegen.c:201:16 #5 0x5570a9fe387c in fstring_replacement_field_rule /src/cpython/Parser/parser.c:15626:31 #6 0x5570a9f82c29 in fstring_middle_rule /src/cpython/Parser/parser.c:15569:46 #7 0x5570a9f82c29 in _loop0_3_rule /src/cpython/Parser/parser.c:24878:35 #8 0x5570a9f82c29 in fstring_rule /src/cpython/Parser/parser.c:1334:18 #9 0x5570a9fc492c in _tmp_253_rule /src/cpython/Parser/parser.c:40299:28 #10 0x5570a9fc492c in _loop1_113_rule /src/cpython/Parser/parser.c:31877:29 #11 0x5570a9fc492c in strings_rule /src/cpython/Parser/parser.c:15962:34 #12 0x5570a9fa4179 in atom_rule /src/cpython/Parser/parser.c:14388:28 #13 0x5570a9fa096f in primary_raw /src/cpython/Parser/parser.c:14023:25 #14 0x5570a9fa096f in primary_rule /src/cpython/Parser/parser.c:13820:22 #15 0x5570a9f9f58d in await_primary_rule /src/cpython/Parser/parser.c:13773:28 #16 0x5570a9f9e9c9 in power_rule /src/cpython/Parser/parser.c:13648:18 #17 0x5570a9f9e174 in factor_rule /src/cpython/Parser/parser.c:13597:26 #18 0x5570a9f9c8ae in term_raw /src/cpython/Parser/parser.c:13437:27 #19 0x5570a9f9c8ae in term_rule /src/cpython/Parser/parser.c:13198:22 #20 0x5570a9f9af27 in sum_raw /src/cpython/Parser/parser.c:13151:25 #21 0x5570a9f9af27 in sum_rule /src/cpython/Parser/parser.c:13029:22 #22 0x5570a9f99ad7 in shift_expr_raw /src/cpython/Parser/parser.c:12988:24 #23 0x5570a9f99ad7 in shift_expr_rule /src/cpython/Parser/parser.c:12866:22 #24 0x5570a9f98792 in bitwise_and_raw /src/cpython/Parser/parser.c:12825:31 #25 0x5570a9f98792 in bitwise_and_rule /src/cpython/Parser/parser.c:12742:22 #26 0x5570a9f975f2 in bitwise_xor_raw /src/cpython/Parser/parser.c:12701:32 #27 0x5570a9f975f2 in bitwise_xor_rule /src/cpython/Parser/parser.c:12618:22 #28 0x5570a9f957e2 in bitwise_or_raw /src/cpython/Parser/parser.c:12577:32 #29 0x5570a9f957e2 in bitwise_or_rule /src/cpython/Parser/parser.c:12494:22 #30 0x5570a9fb2ff3 in comparison_rule /src/cpython/Parser/parser.c:11722:18 #31 0x5570a9fb287f in inversion_rule /src/cpython/Parser/parser.c:11672:31 #32 0x5570a9fb1206 in conjunction_rule /src/cpython/Parser/parser.c:11548:18 #33 0x5570a9fa8eb6 in disjunction_rule /src/cpython/Parser/parser.c:11459:18 #34 0x5570a9f9364e in expression_rule /src/cpython/Parser/parser.c:10739:18 #35 0x5570aa00fb1b in except_block_rule /src/cpython/Parser/parser.c:7147:18 #36 0x5570aa00be08 in _loop1_61_rule /src/cpython/Parser/parser.c:28487:33 #37 0x5570a9f8c713 in try_stmt_rule /src/cpython/Parser/parser.c:7004:44 #38 0x5570a9f85038 in compound_stmt_rule /src/cpython/Parser/parser.c:2185:29 #39 0x5570a9f8385d in statement_rule /src/cpython/Parser/parser.c:1424:18 #40 0x5570a9f8385d in _loop1_4_rule /src/cpython/Parser/parser.c:24946:30 #41 0x5570a9f8385d in statements_rule /src/cpython/Parser/parser.c:1380:18 #42 0x5570a9f7efd5 in file_rule /src/cpython/Parser/parser.c:1128:18 #43 0x5570a9f7efd5 in _PyPegen_parse /src/cpython/Parser/parser.c:41236:18 #44 0x5570a9f693d0 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:825:17 #45 0x5570a9f69fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #46 0x5570aa65cbc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #47 0x5570aa65cbc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #48 0x5570aa65ba1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #49 0x5570aa65d34e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #50 0x5570aa6ed7c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #51 0x5570aa6ea2b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #52 0x5570aa6ea2b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #53 0x5570aa6eb0f3 in pymain_main /src/cpython/Modules/main.c:719:12 #54 0x5570aa6eb461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #55 0x7fe40b31fd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #56 0x7fe40b31fe3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #57 0x5570a9ea4074 in _start (/src/cpython/python+0x32b074) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) AddressSanitizer can not provide additional info. SUMMARY: AddressSanitizer: SEGV /src/cpython/Parser/tokenizer.c:1234:33 in tok_backup ==3888115==ABORTING [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_9 ================================================================= ==3894663==ERROR: AddressSanitizer: heap-use-after-free on address 0x62500001b900 at pc 0x5592e48876b2 bp 0x7fff3059c1b0 sp 0x7fff3059c1a8 READ of size 1 at 0x62500001b900 thread T0 #0 0x5592e48876b1 in unicode_decode_utf8 /src/cpython/Objects/unicodeobject.c:4526:37 #1 0x5592e45f28ad in _syntaxerror_range /src/cpython/Parser/tokenizer.c:1252:15 #2 0x5592e45efa2e in syntaxerror /src/cpython/Parser/tokenizer.c:1294:15 #3 0x5592e45e0b08 in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c #4 0x5592e45e0b08 in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #5 0x5592e45e0b08 in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #6 0x5592e4506afa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #7 0x5592e45019a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #8 0x5592e4501fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #9 0x5592e4bf4bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #10 0x5592e4bf4bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #11 0x5592e4bf3a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #12 0x5592e4bf534e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #13 0x5592e4c857c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #14 0x5592e4c822b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #15 0x5592e4c822b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #16 0x5592e4c830f3 in pymain_main /src/cpython/Modules/main.c:719:12 #17 0x5592e4c83461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #18 0x7f769ea6dd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #19 0x7f769ea6de3f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x29e3f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #20 0x5592e443c074 in _start (/src/cpython/python+0x32b074) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) 0x62500001b900 is located 0 bytes inside of 8533-byte region [0x62500001b900,0x62500001da55) freed by thread T0 here: #0 0x5592e44bf2e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x5592e45f1ad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x5592e45ed004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x5592e45ed004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x5592e45ed004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x5592e45e082e in tok_get_fstring_mode /src/cpython/Parser/tokenizer.c:2507:17 #6 0x5592e45e082e in tok_get /src/cpython/Parser/tokenizer.c:2632:16 #7 0x5592e45e082e in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x5592e4506afa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #9 0x5592e45019a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #10 0x5592e4501fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #11 0x5592e4bf4bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #12 0x5592e4bf4bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #13 0x5592e4bf3a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #14 0x5592e4bf534e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #15 0x5592e4c857c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #16 0x5592e4c822b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #17 0x5592e4c822b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #18 0x5592e4c830f3 in pymain_main /src/cpython/Modules/main.c:719:12 #19 0x5592e4c83461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #20 0x7f769ea6dd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) previously allocated by thread T0 here: #0 0x5592e44bf2e6 in __interceptor_realloc (/src/cpython/python+0x3ae2e6) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x5592e45f1ad1 in tok_reserve_buf /src/cpython/Parser/tokenizer.c:480:26 #2 0x5592e45ed004 in tok_readline_raw /src/cpython/Parser/tokenizer.c:955:14 #3 0x5592e45ed004 in tok_underflow_file /src/cpython/Parser/tokenizer.c:1115:14 #4 0x5592e45ed004 in tok_nextc /src/cpython/Parser/tokenizer.c:1201:18 #5 0x5592e45e5d38 in tok_get_normal_mode /src/cpython/Parser/tokenizer.c:2263:17 #6 0x5592e45e00fb in tok_get /src/cpython/Parser/tokenizer.c #7 0x5592e45e00fb in _PyTokenizer_Get /src/cpython/Parser/tokenizer.c:2639:18 #8 0x5592e4506afa in _PyPegen_tokenize_full_source_to_check_for_errors /src/cpython/Parser/pegen_errors.c:170:17 #9 0x5592e45019a7 in _PyPegen_run_parser /src/cpython/Parser/pegen.c:844:9 #10 0x5592e4501fb4 in _PyPegen_run_parser_from_file_pointer /src/cpython/Parser/pegen.c:897:14 #11 0x5592e4bf4bc1 in pyrun_file /src/cpython/Python/pythonrun.c:1604:11 #12 0x5592e4bf4bc1 in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #13 0x5592e4bf3a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #14 0x5592e4bf534e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #15 0x5592e4c857c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #16 0x5592e4c822b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #17 0x5592e4c822b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #18 0x5592e4c830f3 in pymain_main /src/cpython/Modules/main.c:719:12 #19 0x5592e4c83461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #20 0x7f769ea6dd8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) SUMMARY: AddressSanitizer: heap-use-after-free /src/cpython/Objects/unicodeobject.c:4526:37 in unicode_decode_utf8 Shadow bytes around the buggy address: 0x0c4a7fffb6d0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb6e0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb6f0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb700: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa 0x0c4a7fffb710: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa =>0x0c4a7fffb720:[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb730: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb740: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb750: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb760: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd 0x0c4a7fffb770: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==3894663==ABORTING [afl++ 40e265889130] /src/fuzzResult/python0423/master/crashes/uniq_asan # /src/cpython/python < bug_13 Traceback (most recent call last): File "", line 33, in File "", line 14, in main OSError: [Errno 99] Cannot assign requested address ================================================================= ==3912571==ERROR: LeakSanitizer: detected memory leaks Direct leak of 1520 byte(s) in 1 object(s) allocated from: #0 0x562e4b4c4ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x562e4b7dcc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x562e4b78abf1 in new_keys_object /src/cpython/Objects/dictobject.c:628:14 #3 0x562e4b7757d4 in dictresize /src/cpython/Objects/dictobject.c:1434:19 #4 0x562e4b778814 in insertion_resize /src/cpython/Objects/dictobject.c:1179:12 #5 0x562e4b778814 in PyDict_SetDefault /src/cpython/Objects/dictobject.c:3321:17 #6 0x562e4b824580 in type_add_getset /src/cpython/Objects/typeobject.c:6193:13 #7 0x562e4b824580 in type_ready_fill_dict /src/cpython/Objects/typeobject.c:6627:9 #8 0x562e4b824580 in type_ready /src/cpython/Objects/typeobject.c:6942:9 #9 0x562e4b824580 in PyType_Ready /src/cpython/Objects/typeobject.c:6984:9 #10 0x562e4bbc04c4 in PyModule_AddType /src/cpython/Python/modsupport.c:696:9 #11 0x7f7cb18b1b13 in _datetime_exec /src/cpython/./Modules/_datetimemodule.c:6718:13 #12 0x7f7cb18b1b13 in PyInit__datetime /src/cpython/./Modules/_datetimemodule.c:6895:9 #13 0x562e4bb75d06 in _PyImport_LoadDynamicModuleWithSpec /src/cpython/./Python/importdl.c:169:9 #14 0x562e4bb73c85 in _imp_create_dynamic_impl /src/cpython/Python/import.c:3713:11 #15 0x562e4bb73c85 in _imp_create_dynamic /src/cpython/Python/clinic/import.c.h:506:20 #16 0x562e4b7c032c in cfunction_vectorcall_FASTCALL /src/cpython/Objects/methodobject.c:422:24 #17 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #18 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #19 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #20 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #21 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #22 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #23 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #24 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #25 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #26 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #27 0x562e4ba242cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #28 0x562e4ba242cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #29 0x562e4b7c06e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #30 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #31 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #32 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #33 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #34 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #35 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #36 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #37 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #38 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #39 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #40 0x562e4bc06446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #41 0x562e4bc001cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #42 0x562e4bbfac3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #43 0x562e4bbfac3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 Direct leak of 768 byte(s) in 1 object(s) allocated from: #0 0x562e4b4c4ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x562e4b7dcc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x562e4b78abf1 in new_keys_object /src/cpython/Objects/dictobject.c:628:14 #3 0x562e4b7757d4 in dictresize /src/cpython/Objects/dictobject.c:1434:19 #4 0x562e4b76f104 in insertion_resize /src/cpython/Objects/dictobject.c:1179:12 #5 0x562e4b76f104 in insertdict /src/cpython/Objects/dictobject.c:1246:17 #6 0x562e4b823a9c in add_operators /src/cpython/Objects/typeobject.c:9286:17 #7 0x562e4b823a9c in type_ready_fill_dict /src/cpython/Objects/typeobject.c:6618:9 #8 0x562e4b823a9c in type_ready /src/cpython/Objects/typeobject.c:6942:9 #9 0x562e4b823a9c in PyType_Ready /src/cpython/Objects/typeobject.c:6984:9 #10 0x562e4bbc04c4 in PyModule_AddType /src/cpython/Python/modsupport.c:696:9 #11 0x7f7cb18b1b41 in _datetime_exec /src/cpython/./Modules/_datetimemodule.c:6718:13 #12 0x7f7cb18b1b41 in PyInit__datetime /src/cpython/./Modules/_datetimemodule.c:6895:9 #13 0x562e4bb75d06 in _PyImport_LoadDynamicModuleWithSpec /src/cpython/./Python/importdl.c:169:9 #14 0x562e4bb73c85 in _imp_create_dynamic_impl /src/cpython/Python/import.c:3713:11 #15 0x562e4bb73c85 in _imp_create_dynamic /src/cpython/Python/clinic/import.c.h:506:20 #16 0x562e4b7c032c in cfunction_vectorcall_FASTCALL /src/cpython/Objects/methodobject.c:422:24 #17 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #18 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #19 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #20 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #21 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #22 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #23 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #24 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #25 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #26 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #27 0x562e4ba242cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #28 0x562e4ba242cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #29 0x562e4b7c06e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #30 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #31 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #32 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #33 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #34 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #35 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #36 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #37 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #38 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #39 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #40 0x562e4bc06446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #41 0x562e4bc001cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #42 0x562e4bbfac3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #43 0x562e4bbfac3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 Direct leak of 768 byte(s) in 1 object(s) allocated from: #0 0x562e4b4c4ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x562e4b7dcc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x562e4b78abf1 in new_keys_object /src/cpython/Objects/dictobject.c:628:14 #3 0x562e4b7757d4 in dictresize /src/cpython/Objects/dictobject.c:1434:19 #4 0x562e4b778814 in insertion_resize /src/cpython/Objects/dictobject.c:1179:12 #5 0x562e4b778814 in PyDict_SetDefault /src/cpython/Objects/dictobject.c:3321:17 #6 0x562e4b824580 in type_add_getset /src/cpython/Objects/typeobject.c:6193:13 #7 0x562e4b824580 in type_ready_fill_dict /src/cpython/Objects/typeobject.c:6627:9 #8 0x562e4b824580 in type_ready /src/cpython/Objects/typeobject.c:6942:9 #9 0x562e4b824580 in PyType_Ready /src/cpython/Objects/typeobject.c:6984:9 #10 0x562e4bbc04c4 in PyModule_AddType /src/cpython/Python/modsupport.c:696:9 #11 0x7f7cb18b1b2a in _datetime_exec /src/cpython/./Modules/_datetimemodule.c:6718:13 #12 0x7f7cb18b1b2a in PyInit__datetime /src/cpython/./Modules/_datetimemodule.c:6895:9 #13 0x562e4bb75d06 in _PyImport_LoadDynamicModuleWithSpec /src/cpython/./Python/importdl.c:169:9 #14 0x562e4bb73c85 in _imp_create_dynamic_impl /src/cpython/Python/import.c:3713:11 #15 0x562e4bb73c85 in _imp_create_dynamic /src/cpython/Python/clinic/import.c.h:506:20 #16 0x562e4b7c032c in cfunction_vectorcall_FASTCALL /src/cpython/Objects/methodobject.c:422:24 #17 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #18 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #19 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #20 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #21 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #22 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #23 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #24 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #25 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #26 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #27 0x562e4ba242cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #28 0x562e4ba242cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #29 0x562e4b7c06e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #30 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #31 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #32 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #33 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #34 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #35 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #36 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #37 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #38 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #39 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #40 0x562e4bc06446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #41 0x562e4bc001cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #42 0x562e4bbfac3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #43 0x562e4bbfac3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 Direct leak of 768 byte(s) in 1 object(s) allocated from: #0 0x562e4b4c4ebe in __interceptor_malloc (/src/cpython/python+0x3adebe) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x562e4b7dcc36 in _PyObject_Malloc /src/cpython/Objects/obmalloc.c:1332:11 #2 0x562e4b78abf1 in new_keys_object /src/cpython/Objects/dictobject.c:628:14 #3 0x562e4b7757d4 in dictresize /src/cpython/Objects/dictobject.c:1434:19 #4 0x562e4b778814 in insertion_resize /src/cpython/Objects/dictobject.c:1179:12 #5 0x562e4b778814 in PyDict_SetDefault /src/cpython/Objects/dictobject.c:3321:17 #6 0x562e4b823e38 in type_add_method /src/cpython/Objects/typeobject.c:6120:15 #7 0x562e4b823e38 in type_add_methods /src/cpython/Objects/typeobject.c:6146:13 #8 0x562e4b823e38 in type_ready_fill_dict /src/cpython/Objects/typeobject.c:6621:9 #9 0x562e4b823e38 in type_ready /src/cpython/Objects/typeobject.c:6942:9 #10 0x562e4b823e38 in PyType_Ready /src/cpython/Objects/typeobject.c:6984:9 #11 0x562e4bbc04c4 in PyModule_AddType /src/cpython/Python/modsupport.c:696:9 #12 0x7f7cb18b1af9 in _datetime_exec /src/cpython/./Modules/_datetimemodule.c:6718:13 #13 0x7f7cb18b1af9 in PyInit__datetime /src/cpython/./Modules/_datetimemodule.c:6895:9 #14 0x562e4bb75d06 in _PyImport_LoadDynamicModuleWithSpec /src/cpython/./Python/importdl.c:169:9 #15 0x562e4bb73c85 in _imp_create_dynamic_impl /src/cpython/Python/import.c:3713:11 #16 0x562e4bb73c85 in _imp_create_dynamic /src/cpython/Python/clinic/import.c.h:506:20 #17 0x562e4b7c032c in cfunction_vectorcall_FASTCALL /src/cpython/Objects/methodobject.c:422:24 #18 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #19 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #20 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #21 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #22 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #23 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #24 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #25 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #26 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #27 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #28 0x562e4ba242cb in builtin_exec_impl /src/cpython/Python/bltinmodule.c:1079:17 #29 0x562e4ba242cb in builtin_exec /src/cpython/Python/clinic/bltinmodule.c.h:586:20 #30 0x562e4b7c06e5 in cfunction_vectorcall_FASTCALL_KEYWORDS /src/cpython/Objects/methodobject.c:438:24 #31 0x562e4b671d32 in _PyVectorcall_Call /src/cpython/Objects/call.c:247:16 #32 0x562e4ba42e76 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:3062:26 #33 0x562e4b67800e in _PyObject_VectorcallTstate /src/cpython/./Include/internal/pycore_call.h:92:11 #34 0x562e4b67800e in object_vacall /src/cpython/Objects/call.c:828:14 #35 0x562e4b677601 in PyObject_CallMethodObjArgs /src/cpython/Objects/call.c:889:24 #36 0x562e4bb69a9d in import_find_and_load /src/cpython/Python/import.c:2708:11 #37 0x562e4bb69a9d in PyImport_ImportModuleLevelObject /src/cpython/Python/import.c:2791:15 #38 0x562e4ba56349 in import_name /src/cpython/Python/ceval.c:2303:15 #39 0x562e4ba56349 in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:1956:19 #40 0x562e4ba2eb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #41 0x562e4bc06446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #42 0x562e4bc001cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #43 0x562e4bbfac3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #44 0x562e4bbfac3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 SUMMARY: AddressSanitizer: 3824 byte(s) leaked in 4 allocation(s). [afl++ 40e265889130] /AFLplusplus # /src/cpython/python < /src/fuzzResult/python0423/slave2/crashes/uniq_asan/bug_15 :1: SyntaxWarning: invalid escape sequence '\>' 总共耗费了0.000秒. ================================================================= ==1117==ERROR: AddressSanitizer: heap-use-after-free on address 0x612000000848 at pc 0x5646439829d4 bp 0x7f00124fdd00 sp 0x7f00124fdcf8 WRITE of size 8 at 0x612000000848 thread T2 #0 0x5646439829d3 in bind_tstate /src/cpython/Python/pystate.c:229:23 #1 0x5646439829d3 in _PyThreadState_Bind /src/cpython/Python/pystate.c:1869:5 #2 0x564643ba1726 in thread_run /src/cpython/./Modules/_threadmodule.c:1077:5 #3 0x5646439d9252 in pythread_wrapper /src/cpython/Python/thread_pthread.h:233:5 #4 0x7f0014fd1b42 (/lib/x86_64-linux-gnu/libc.so.6+0x94b42) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) #5 0x7f0015062bb3 in __clone (/lib/x86_64-linux-gnu/libc.so.6+0x125bb3) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) 0x612000000848 is located 136 bytes inside of 288-byte region [0x6120000007c0,0x6120000008e0) freed by thread T0 here: #0 0x564643253c12 in free (/src/cpython/python+0x3adc12) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x564643980cf8 in free_threadstate /src/cpython/Python/pystate.c:1217:9 #2 0x564643980cf8 in _PyThreadState_DeleteExcept /src/cpython/Python/pystate.c:1583:9 #3 0x56464396706e in Py_FinalizeEx /src/cpython/Python/pylifecycle.c:1806:5 #4 0x564643a15dbb in Py_RunMain /src/cpython/Modules/main.c:691:9 #5 0x564643a180f3 in pymain_main /src/cpython/Modules/main.c:719:12 #6 0x564643a18461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #7 0x7f0014f66d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) previously allocated by thread T0 here: #0 0x5646432540a8 in __interceptor_calloc (/src/cpython/python+0x3ae0a8) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x56464397e847 in alloc_threadstate /src/cpython/Python/pystate.c:1208:12 #2 0x56464397e847 in new_threadstate /src/cpython/Python/pystate.c:1293:33 #3 0x564643b9fe2d in thread_PyThread_start_new_thread /src/cpython/./Modules/_threadmodule.c:1164:20 #4 0x564643551af2 in cfunction_call /src/cpython/Objects/methodobject.c:548:18 #5 0x5646433ff5d6 in _PyObject_MakeTpCall /src/cpython/Objects/call.c:216:18 #6 0x5646437e402e in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:2533:19 #7 0x5646437bdb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #8 0x564643995446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #9 0x56464398f1cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #10 0x564643989c3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #11 0x564643989c3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #12 0x564643988a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #13 0x56464398a34e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #14 0x564643a1a7c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #15 0x564643a172b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #16 0x564643a172b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #17 0x564643a180f3 in pymain_main /src/cpython/Modules/main.c:719:12 #18 0x564643a18461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #19 0x7f0014f66d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) Thread T2 created by T0 here: #0 0x56464323d33c in pthread_create (/src/cpython/python+0x39733c) (BuildId: 4cdefe0227558c842e0819eb6df2e301fc240bc4) #1 0x5646439d9034 in PyThread_start_new_thread /src/cpython/Python/thread_pthread.h:280:14 #2 0x564643ba01f2 in thread_PyThread_start_new_thread /src/cpython/./Modules/_threadmodule.c:1177:27 #3 0x564643551af2 in cfunction_call /src/cpython/Objects/methodobject.c:548:18 #4 0x5646433ff5d6 in _PyObject_MakeTpCall /src/cpython/Objects/call.c:216:18 #5 0x5646437e402e in _PyEval_EvalFrameDefault /src/cpython/Python/bytecodes.c:2533:19 #6 0x5646437bdb83 in PyEval_EvalCode /src/cpython/Python/ceval.c:562:21 #7 0x564643995446 in run_eval_code_obj /src/cpython/Python/pythonrun.c:1692:9 #8 0x56464398f1cd in run_mod /src/cpython/Python/pythonrun.c:1713:19 #9 0x564643989c3b in pyrun_file /src/cpython/Python/pythonrun.c:1613:15 #10 0x564643989c3b in _PyRun_SimpleFileObject /src/cpython/Python/pythonrun.c:433:13 #11 0x564643988a1f in _PyRun_AnyFileObject /src/cpython/Python/pythonrun.c:78:15 #12 0x56464398a34e in PyRun_AnyFileExFlags /src/cpython/Python/pythonrun.c:104:15 #13 0x564643a1a7c7 in pymain_run_stdin /src/cpython/Modules/main.c:520:15 #14 0x564643a172b8 in pymain_run_python /src/cpython/Modules/main.c:613:21 #15 0x564643a172b8 in Py_RunMain /src/cpython/Modules/main.c:689:5 #16 0x564643a180f3 in pymain_main /src/cpython/Modules/main.c:719:12 #17 0x564643a18461 in Py_BytesMain /src/cpython/Modules/main.c:743:12 #18 0x7f0014f66d8f (/lib/x86_64-linux-gnu/libc.so.6+0x29d8f) (BuildId: 69389d485a9793dbe873f0ea2c93e02efaa9aa3d) SUMMARY: AddressSanitizer: heap-use-after-free /src/cpython/Python/pystate.c:229:23 in bind_tstate Shadow bytes around the buggy address: 0x0c247fff80b0: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa 0x0c247fff80c0: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c247fff80d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c247fff80e0: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa 0x0c247fff80f0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd =>0x0c247fff8100: fd fd fd fd fd fd fd fd fd[fd]fd fd fd fd fd fd 0x0c247fff8110: fd fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa 0x0c247fff8120: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00 0x0c247fff8130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0x0c247fff8140: 00 00 00 00 00 00 00 00 00 00 00 00 fa fa fa fa 0x0c247fff8150: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa Shadow byte legend (one shadow byte represents 8 application bytes): Addressable: 00 Partially addressable: 01 02 03 04 05 06 07 Heap left redzone: fa Freed heap region: fd Stack left redzone: f1 Stack mid redzone: f2 Stack right redzone: f3 Stack after return: f5 Stack use after scope: f8 Global redzone: f9 Global init order: f6 Poisoned by user: f7 Container overflow: fc Array cookie: ac Intra object redzone: bb ASan internal: fe Left alloca redzone: ca Right alloca redzone: cb ==1117==ABORTING