Stream: git-wasmtime

Topic: wasmtime / issue #11587 Panic in table_ops testcase gener...


view this post on Zulip Wasmtime GitHub notifications bot (Sep 02 2025 at 14:32):

alexcrichton opened issue #11587:

This input: clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt

yields:

$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev table_ops ./clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt
...
WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: found LLVMFuzzerCustomMutator (0x5cc922bb0d80). Disabling -len_control by default.
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 653754390
INFO: Loaded 1 modules   (1544189 inline 8-bit counters): 1544189 [0x5cc92e926a10, 0x5cc92ea9fa0d),
INFO: Loaded 1 PC tables (1544189 PCs): 1544189 [0x5cc92ea9fa10,0x5cc93022f9e0),
target/x86_64-unknown-linux-gnu/debug/table_ops: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt
[2025-09-02T14:31:52Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=y -Ccranelift-wasmtime_inlining_intra_module=gc -Ccranelift-wasmtime_linkopt_padding_between_functions=26478 -Ccranelift-enable_heap_access_spectre_mitigation=true -Oopt-level=2 -Oregalloc-algorithm=backtracking -Omemory-reservation=65536 -Omemory-reservation-for-growth=0 -Omemory-guard-size=0 -Oguard-before-linear-memory=y -Otable-lazy-init=n -Opooling-allocator=y -Opooling-decommit-batch-size=316 -Opooling-memory-keep-resident=171243 -Opooling-table-keep-resident=184144 -Opooling-memory-protection-keys=auto -Opooling-max-memory-protection-keys=17 -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Opooling-total-core-instances=21 -Opooling-total-component-instances=48 -Opooling-total-memories=1 -Opooling-total-tables=1 -Opooling-total-stacks=42 -Opooling-max-memory-size=65536 -Opooling-table-elements=906 -Opooling-max-core-instance-size=211512 -Opooling-max-unused-warm-slots=70 -Opooling-async-stack-keep-resident=84660 -Opooling-max-component-instance-size=617316 -Opooling-max-memories-per-component=8 -Opooling-max-tables-per-component=4 -Opooling-max-tables-per-module=10 -Opooling-max-memories-per-module=3 -Osignals-based-traps=y -Opooling-pagemap-scan=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=y -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=y -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=y -Wwide-arithmetic=n -Wextended-const=y -Wexceptions=y -Daddress-map=y

thread '<unnamed>' panicked at crates/fuzzing/src/generators/table_ops.rs:484:1:
assertion failed: limit > 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==118924== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

cc @khagankhan

view this post on Zulip Wasmtime GitHub notifications bot (Sep 02 2025 at 14:32):

alexcrichton added the fuzz-bug label to Issue #11587.

view this post on Zulip Wasmtime GitHub notifications bot (Sep 03 2025 at 00:34):

khagankhan commented on issue #11587:

Ha! I will look into that! Thanks @alexcrichton

view this post on Zulip Wasmtime GitHub notifications bot (Sep 17 2025 at 19:54):

khagankhan commented on issue #11587:

@alexcrichton #11605 fixed this assertion failure.

view this post on Zulip Wasmtime GitHub notifications bot (Sep 17 2025 at 20:03):

alexcrichton closed issue #11587:

This input: clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt

yields:

$ RUST_LOG=wasmtime_fuz cargo +nightly fuzz run -s none --dev table_ops ./clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt
...
WARNING: Failed to find function "__sanitizer_acquire_crash_state".
WARNING: Failed to find function "__sanitizer_print_stack_trace".
WARNING: Failed to find function "__sanitizer_set_death_callback".
INFO: found LLVMFuzzerCustomMutator (0x5cc922bb0d80). Disabling -len_control by default.
INFO: Running with entropic power schedule (0xFF, 100).
INFO: Seed: 653754390
INFO: Loaded 1 modules   (1544189 inline 8-bit counters): 1544189 [0x5cc92e926a10, 0x5cc92ea9fa0d),
INFO: Loaded 1 PC tables (1544189 PCs): 1544189 [0x5cc92ea9fa10,0x5cc93022f9e0),
target/x86_64-unknown-linux-gnu/debug/table_ops: Running 1 inputs 1 time(s) each.
Running: ./clusterfuzz-testcase-minimized-table_ops-5344213320663040.txt
[2025-09-02T14:31:52Z DEBUG wasmtime_fuzzing::generators::config] creating wasmtime config with CLI options:
    -Ccompiler=cranelift -Ccollector=drc -Ccranelift-debug-verifier=n -Cparallel-compilation=n -Cpcc=n -Cnative-unwind-info=y -Ccranelift-wasmtime_inlining_intra_module=gc -Ccranelift-wasmtime_linkopt_padding_between_functions=26478 -Ccranelift-enable_heap_access_spectre_mitigation=true -Oopt-level=2 -Oregalloc-algorithm=backtracking -Omemory-reservation=65536 -Omemory-reservation-for-growth=0 -Omemory-guard-size=0 -Oguard-before-linear-memory=y -Otable-lazy-init=n -Opooling-allocator=y -Opooling-decommit-batch-size=316 -Opooling-memory-keep-resident=171243 -Opooling-table-keep-resident=184144 -Opooling-memory-protection-keys=auto -Opooling-max-memory-protection-keys=17 -Omemory-init-cow=n -Omemory-guaranteed-dense-image-size=16777216 -Opooling-total-core-instances=21 -Opooling-total-component-instances=48 -Opooling-total-memories=1 -Opooling-total-tables=1 -Opooling-total-stacks=42 -Opooling-max-memory-size=65536 -Opooling-table-elements=906 -Opooling-max-core-instance-size=211512 -Opooling-max-unused-warm-slots=70 -Opooling-async-stack-keep-resident=84660 -Opooling-max-component-instance-size=617316 -Opooling-max-memories-per-component=8 -Opooling-max-tables-per-component=4 -Opooling-max-tables-per-module=10 -Opooling-max-memories-per-module=3 -Osignals-based-traps=y -Opooling-pagemap-scan=n -Wnan-canonicalization=y -Wfuel=18446744073709551615 -Wepoch-interruption=n -Wasync-stack-zeroing=y -Wbulk-memory=y -Wmulti-memory=n -Wmulti-value=y -Wreference-types=n -Wsimd=n -Wrelaxed-simd=n -Wtail-call=y -Wthreads=n -Wshared-everything-threads=n -Wmemory64=n -Wcomponent-model-async=n -Wcomponent-model-async-builtins=n -Wcomponent-model-async-stackful=n -Wcomponent-model-error-context=n -Wcomponent-model-gc=n -Wfunction-references=n -Wgc=n -Wcustom-page-sizes=y -Wwide-arithmetic=n -Wextended-const=y -Wexceptions=y -Daddress-map=y

thread '<unnamed>' panicked at crates/fuzzing/src/generators/table_ops.rs:484:1:
assertion failed: limit > 0
note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
==118924== ERROR: libFuzzer: deadly signal
NOTE: libFuzzer has rudimentary signal handlers.
      Combine libFuzzer with AddressSanitizer or similar for better crash reports.
SUMMARY: libFuzzer: deadly signal
────────────────────────────────────────────────────────────────────────────────

Error: Fuzz target exited with exit status: 77

cc @khagankhan

view this post on Zulip Wasmtime GitHub notifications bot (Sep 17 2025 at 20:03):

alexcrichton commented on issue #11587:

Thanks!


Last updated: Dec 06 2025 at 07:03 UTC