Stream: git-wasmtime

Topic: wasmtime / issue #11551 Exceptions during instantiation c...


view this post on Zulip Wasmtime GitHub notifications bot (Aug 27 2025 at 20:42):

abrown edited issue #11551:

With this input: clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt current main shows:

$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev instantiate ./clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt
...
WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: found LLVMFuzzerCustomMutator (0x5794b4952000). Disabling -len_control by default.
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 967009604
INFO: Loaded 1 modules   (1542965 inline 8-bit counters): 1542965 [0x5794c06b5850, 0x5794c082e385),
INFO: Loaded 1 PC tables (1542965 PCs): 1542965 [0x5794c082e388,0x5794c1fb96d8),
target/x86_64-unknown-linux-gnu/debug/instantiate: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-instantiate-5891385443287040
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::single_module_fuzzer] fuzz input not a valid module: magic header not detected: bad magic number - expected=[
        0x0,
        0x61,
        0x73,
        0x6d,
    ] actual=[
        0x20,
        0x20,
        0x20,
        0x20,
    ] (at offset 0x0)
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Cinlining=n -Ccranelift-wasmtime_inlining_sum_size_threshold=1000 -Ccranelift-wasmtime_linkopt_padding_between_functions=8224 -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=n -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] failed to instantiate: thrown Wasm exception

thread '<unnamed>' panicked at crates/fuzzing/src/oracles.rs:434:5:
failed to instantiate: thrown Wasm exception
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==1281202== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

We probably want to update the allowed list of results to include traps would be my guess

view this post on Zulip Wasmtime GitHub notifications bot (Aug 28 2025 at 01:53):

alexcrichton closed issue #11551:

With this input: clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt current main shows:

$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev instantiate ./clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt
...
WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: found LLVMFuzzerCustomMutator (0x5794b4952000). Disabling -len_control by default.
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 967009604
INFO: Loaded 1 modules   (1542965 inline 8-bit counters): 1542965 [0x5794c06b5850, 0x5794c082e385),
INFO: Loaded 1 PC tables (1542965 PCs): 1542965 [0x5794c082e388,0x5794c1fb96d8),
target/x86_64-unknown-linux-gnu/debug/instantiate: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-instantiate-5891385443287040
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::single_module_fuzzer] fuzz input not a valid module: magic header not detected: bad magic number - expected=[
        0x0,
        0x61,
        0x73,
        0x6d,
    ] actual=[
        0x20,
        0x20,
        0x20,
        0x20,
    ] (at offset 0x0)
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json`
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Cinlining=n -Ccranelift-wasmtime_inlining_sum_size_threshold=1000 -Ccranelift-wasmtime_linkopt_padding_between_functions=8224 -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=n -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm`
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes
[2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] failed to instantiate: thrown Wasm exception

thread '<unnamed>' panicked at crates/fuzzing/src/oracles.rs:434:5:
failed to instantiate: thrown Wasm exception
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==1281202== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

We probably want to update the allowed list of results to include traps would be my guess


Last updated: Dec 06 2025 at 07:03 UTC