abrown edited issue #11551:
With this input: clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt current main shows:
$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev instantiate ./clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt ... WARNING: Failed to find function "__sanitizer_acquire_crash_state". WARNING: Failed to find function "__sanitizer_print_stack_trace". WARNING: Failed to find function "__sanitizer_set_death_callback". INFO: found LLVMFuzzerCustomMutator (0x5794b4952000). Disabling -len_control by default. INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 967009604 INFO: Loaded 1 modules (1542965 inline 8-bit counters): 1542965 [0x5794c06b5850, 0x5794c082e385), INFO: Loaded 1 PC tables (1542965 PCs): 1542965 [0x5794c082e388,0x5794c1fb96d8), target/x86_64-unknown-linux-gnu/debug/instantiate: Running 1 inputs 1 time(s) each. Running: ./clusterfuzz-testcase-minimized-instantiate-5891385443287040 [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::single_module_fuzzer] fuzz input not a valid module: magic header not detected: bad magic number - expected=[ 0x0, 0x61, 0x73, 0x6d, ] actual=[ 0x20, 0x20, 0x20, 0x20, ] (at offset 0x0) [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json` [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options: -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Cinlining=n -Ccranelift-wasmtime_inlining_sum_size_threshold=1000 -Ccranelift-wasmtime_linkopt_padding_between_functions=8224 -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=n -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm` [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] failed to instantiate: thrown Wasm exception thread '<unnamed>' panicked at crates/fuzzing/src/oracles.rs:434:5: failed to instantiate: thrown Wasm exception note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace ==1281202== ERROR: libFuzzer: deadly signal NOTE: libFuzzer has rudimentary signal handlers. Combine libFuzzer with AddressSanitizer or similar for better crash reports. SUMMARY: libFuzzer: deadly signal ──────────────────────────────────────────────────────────────────────────────── Error: Fuzz target exited with exit status: 77We probably want to update the allowed list of results to include traps would be my guess
alexcrichton closed issue #11551:
With this input: clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt current main shows:
$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev instantiate ./clusterfuzz-testcase-minimized-instantiate-5891385443287040.txt ... WARNING: Failed to find function "__sanitizer_acquire_crash_state". WARNING: Failed to find function "__sanitizer_print_stack_trace". WARNING: Failed to find function "__sanitizer_set_death_callback". INFO: found LLVMFuzzerCustomMutator (0x5794b4952000). Disabling -len_control by default. INFO: Running with entropic power schedule (0xFF, 100). INFO: Seed: 967009604 INFO: Loaded 1 modules (1542965 inline 8-bit counters): 1542965 [0x5794c06b5850, 0x5794c082e385), INFO: Loaded 1 PC tables (1542965 PCs): 1542965 [0x5794c082e388,0x5794c1fb96d8), target/x86_64-unknown-linux-gnu/debug/instantiate: Running 1 inputs 1 time(s) each. Running: ./clusterfuzz-testcase-minimized-instantiate-5891385443287040 [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::single_module_fuzzer] fuzz input not a valid module: magic header not detected: bad magic number - expected=[ 0x0, 0x61, 0x73, 0x6d, ] actual=[ 0x20, 0x20, 0x20, 0x20, ] (at offset 0x0) [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::module] writing `testcase0.dna` and `testcase0.json` [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options: -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=n -Cinlining=n -Ccranelift-wasmtime_inlining_sum_size_threshold=1000 -Ccranelift-wasmtime_linkopt_padding_between_functions=8224 -Oopt-level=0 -Oregalloc-algorithm=backtracking -Oguard-before-linear-memory=n -Otable-lazy-init=n -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Osignals-based-traps=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=n -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=n -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=n -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=n -Wwide-arithmetic=n -Wextended-const=n -Wexceptions=y -Daddress-map=n [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] wrote wasm file to `testcase0.wasm` [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x0 bytes [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes [2025-08-27T14:35:16Z TRACE wasmtime_fuzzing::oracles] alloc 0x10000 bytes [2025-08-27T14:35:16Z DEBUG wasmtime_fuzzing::oracles] failed to instantiate: thrown Wasm exception thread '<unnamed>' panicked at crates/fuzzing/src/oracles.rs:434:5: failed to instantiate: thrown Wasm exception note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace ==1281202== ERROR: libFuzzer: deadly signal NOTE: libFuzzer has rudimentary signal handlers. Combine libFuzzer with AddressSanitizer or similar for better crash reports. SUMMARY: libFuzzer: deadly signal ──────────────────────────────────────────────────────────────────────────────── Error: Fuzz target exited with exit status: 77We probably want to update the allowed list of results to include traps would be my guess
Last updated: Dec 06 2025 at 07:03 UTC