guidovranken / cryptofuzz

Fuzzing cryptographic libraries. Magic bug printer go brrrr.

Home Page:https://guidovranken.com/2019/05/14/differential-fuzzing-of-cryptographic-libraries/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Having error when doing ./generate_corpus on our internal library

olivieradjonyo opened this issue · comments

We are encountering the bellow error when running the generate_corpus against our customized aes in our Jenkins pipeline:

` generate_corpus ../tvt-fuzzing/tii_aes
AddressSanitizer:DEADLYSIGNAL

==139==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f3f32f9c521 bp 0x000000000001 sp 0x7ffcf1a84e10 T0)
==139==The signal is caused by a READ memory access.
==139==Hint: address points to the zero page.
#0 0x7f3f32f9c521 in fwrite (/lib/x86_64-linux-gnu/libc.so.6+0x72521)
#1 0x4390df in fwrite (/home/jenkins/cryptofuzz/generate_corpus+0x4390df)
#2 0x4d2e6a in write(std::__cxx11::basic_string<char, std::char_traits, std::allocator >, std::__debug::vector<unsigned char, std::allocator > const&) /home/jenkins/cryptofuzz/generate_corpus.cpp:193:5
#3 0x4d1d84 in generate_Digest_inner(std::__cxx11::basic_string<char, std::char_traits, std::allocator >, unsigned long, unsigned long, unsigned long, unsigned long) /home/jenkins/cryptofuzz/generate_corpus.cpp:242:5
#4 0x4ce961 in generate_Digest(std::__cxx11::basic_string<char, std::char_traits, std::allocator >, unsigned long) /home/jenkins/cryptofuzz/generate_corpus.cpp:249:17
#5 0x4cd4be in main /home/jenkins/cryptofuzz/generate_corpus.cpp:447:9
#6 0x7f3f32f4dd09 in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x23d09)
#7 0x420799 in _start (/home/jenkins/cryptofuzz/generate_corpus+0x420799)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV (/lib/x86_64-linux-gnu/libc.so.6+0x72521) in fwrite
==139==ABORTING
script returned exit code 1`

Should we have to modify the code of Cryptofuzz that is doing the generate_corpus to adapt it to our module (tii_aes for example).
Some clarification will be very welcome because we are a bit lost.
Thanks in advance.