Stack overflow detected during fuzzing

Open
#405 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
rust
Domain
web-dev

Research direction

Start with the cssparser fuzz target and reproduce the crash using the attached input, which contains about 17,500 opening brackets. Trace the stack overflow in the parser and add regression coverage; done means the input no longer causes a stack overflow or core dump.

Written by the indexing model from the issue text.

Description

While fuzzing the cssparser fuzz target I encountered a stack overflow leading to a core dump.
The overflow occurs when the input contains ~17500 (or more) opening brackets, i.e., (, [, {.

I attached an example input that was generated by the fuzzer.

64a4f3d80c6f9598cfc40255f7410db68675019d5c2be9eb5555ca5721c29516.txt

Dominant language
Rust
Stars
869
Forks
152
Avg merge
15h 8m
Merged PRs (30d)
12

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from servo/rust-cssparser

All issues in servo/rust-cssparser

Similar issues

More Rust issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.