[gnutls-devel] GnuTLS | UB detected, but test suite stays silent (#878)
Development of GNU's TLS library
gnutls-devel at lists.gnutls.org
Wed Dec 18 13:22:29 CET 2019
Tim Rühsen created an issue: https://gitlab.com/gnutls/gnutls/issues/878
Building with ASAN/UBSAN enabled and then `cd fuzz; make check; grep -i Sani *.log` shows:
```
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1155:22 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior pk.c:573:28 in
gnutls_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior pk.c:573:19 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_client_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_ocsp_resp_parser_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior ocsp_output.c:527:58 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior ../num.h:60:12 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_psk_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1155:22 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_psk_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1155:22 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior pk.c:668:12 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior pk.c:670:37 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rsa.c:233:8 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rsa.c:235:8 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rsa.c:231:7 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rsa.c:236:10 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1155:22 in
gnutls_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_server_rawpk_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_set_trust_file_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior verify-high.c:284:7 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_srp_client_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:96:15 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior rnd-fuzzer.c:122:10 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior handshake.c:2704:34 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1173:61 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.c:982:15 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:298:9 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior kx.c:299:34 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior hello_ext.c:403:9 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior num.h:60:12 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1773:47 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior buffers.h:89:15 in
gnutls_srp_server_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior record.c:1155:22 in
gnutls_x509_verify_fuzzer.log:SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior verify.c:660:29 in
```
We should fix these and then set UBSAN_OPTIONS in the CI to abort on UB.
--
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/issues/878
You're receiving this email because of your account on gitlab.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20191218/08b7fa1f/attachment-0001.html>
More information about the Gnutls-devel
mailing list