SEGV at moddable/xs/sources/xsSyntaxical.c:3499

[kvenux]

Build environment:

Ubuntu 16.04
gcc 5.4.0
xst version: 8ce9616
build command:
cd /path/to/moddable/xs/makefiles/lin
make
test command: ./xst poc

Target device:

Desktop Linux

POC

xs-new-000016.txt

Description

Below is the ASAN outputs.

ASAN:SIGSEGV

==38015==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000002 (pc 0x0000008d07e8 bp 0x60400000cb98 sp 0x7fff11bf1730 T0)
#0 0x8d07e7 in fxParametersBindingFromExpressions /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:3499
#1 0x8d07e7 in fxGroupExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:2681
#2 0x8d2209 in fxLiteralExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:2189
#3 0x8d6337 in fxCallExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1920
#4 0x8d7a17 in fxPostfixExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1907
#5 0x8d7a17 in fxPrefixExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1902
#6 0x8d824d in fxExponentiationExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1841
#7 0x8d9625 in fxExponentiationExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1838
#8 0x8d9625 in fxMultiplicativeExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1825
#9 0x8d9b2d in fxAdditiveExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1812
#10 0x8d9eed in fxShiftExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1799
#11 0x8da1cd in fxRelationalExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1784
#12 0x8da81d in fxEqualExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1771
#13 0x8dabe4 in fxBitAndExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1759
#14 0x8dabe4 in fxBitXorExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1747
#15 0x8db804 in fxBitOrExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1735
#16 0x8db804 in fxAndExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1723
#17 0x8db804 in fxOrExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1711
#18 0x8e2a1b in fxCoalesceExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1699
#19 0x8e2a1b in fxConditionalExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1681
#20 0x8e2a1b in fxAssignmentExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1666
#21 0x905577 in fxParameters /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:2930
#22 0x8d679f in fxCallExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1959
#23 0x8d7a17 in fxPostfixExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1907
#24 0x8d7a17 in fxPrefixExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1902
#25 0x8d824d in fxExponentiationExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1841
#26 0x8d9625 in fxExponentiationExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1838
#27 0x8d9625 in fxMultiplicativeExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1825
#28 0x8d9b2d in fxAdditiveExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1812
#29 0x8d9eed in fxShiftExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1799
#30 0x8da1cd in fxRelationalExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1784
#31 0x8da81d in fxEqualExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1771
#32 0x8dabe4 in fxBitAndExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1759
#33 0x8dabe4 in fxBitXorExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1747
#34 0x8db804 in fxBitOrExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1735
#35 0x8db804 in fxAndExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1723
#36 0x8db804 in fxOrExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1711
#37 0x8e2a1b in fxCoalesceExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1699
#38 0x8e2a1b in fxConditionalExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1681
#39 0x8e2a1b in fxAssignmentExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1666
#40 0x901ad6 in fxCommaExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1645
#41 0x911e8b in fxStatement /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1273
#42 0x9151a8 in fxBody /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1097
#43 0x915a0e in fxFunctionExpression /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:2608
#44 0x90f0b2 in fxStatement /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1193
#45 0x9151a8 in fxBody /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1097
#46 0x91caf1 in fxProgram /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:1065
#47 0x922785 in fxParserTree /home/keven/Fuzzing/moddable-latest/xs/sources/xsTree.c:168
#48 0x785252 in fxLoadScript /home/keven/Fuzzing/moddable-latest/xs/sources/xsPlatforms.c:388
#49 0xa42beb in fxRunProgramFile /home/keven/Fuzzing/moddable-latest/xs/tools/xst.c:1466
#50 0x428873 in main /home/keven/Fuzzing/moddable-latest/xs/tools/xst.c:348
#51 0x7fc0189da83f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2083f)
#52 0x42c368 in _start (/home/keven/Fuzzing/moddable-latest/build/bin/lin/debug/xst+0x42c368)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV /home/keven/Fuzzing/moddable-latest/xs/sources/xsSyntaxical.c:3499 fxParametersBindingFromExpressions
==38015==ABORTING

[phoddie]

This test can be simplified to:

(x, ()) => 1