Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-88822

Undefined behavior in QDateTime::fromString

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • P2: Important
    • 6.0.1
    • 5.15.2
    • Core: Date/Time
    • Ubuntu 20.04 LTS 64 bit

    Description

      1. Configure Qt with: 
        -sanitize fuzzer-no-link -sanitize undefined
      2. Build Qt.
      3. Use this Qt build to build your fuzz target for QDateTime.
      4. Let it run on the attached input file. 
        ./fromstring input

        You will see output like:

        INFO: Seed: 2362154439
INFO: Loaded 1 modules   (251117 inline 8-bit counters): 251117 [0x13a1e28, 0x13df315), 
INFO: Loaded 1 PC tables (251117 PCs): 251117 [0x13df318,0x17b41e8), 
./fromstring: Running 1 inputs 1 time(s) each.
Running: freshcorpus/67d5ff91f2123568733340d06d1cdb67fcd0e6e8
/home/qtrob/dev/src/qt-5.15.2-base_svg/qtbase/src/corelib/time/qgregoriancalendar.cpp:158:23: runtime error: signed integer overflow: 4 * -9223372036854743764 cannot be represented in type 'long long'
SUMMARY: UndefinedBehaviorSanitizer: undefined-behavior /home/qtrob/dev/src/qt-5.15.2-base_svg/qtbase/src/corelib/time/qgregoriancalendar.cpp:158:23 in 
Executed freshcorpus/67d5ff91f2123568733340d06d1cdb67fcd0e6e8 in 6 ms
***
*** NOTE: fuzzing was not performed, you have only
***       executed the target code on a fixed set of inputs.
***

      Attachments

        Activity

          People

            andreasbuhr Andreas Buhr
            rlohning Robert Löhning
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: