723067 - Misc non-verifiable input causes assertion fails in Debug shell runs

Status: RESOLVED WONTFIX

(Tamarin Graveyard :: Virtual Machine, defect)

Description

[Felix S. Klock II [:pnkfelix, :fklock]]

While playing with a fuzzer, I found various inputs that will normally fail verification, but in a Debug build, they assert-fail first.

This is a sign that either
  (1) our Debug builds are too strict (in that non-verifiable input should signal the verification failure first, without continuing to a point where an assertion is thrown) or
  (2) there is some other latent bug here that is hidden by the Verification failure in the Release builds but is being exposed in the Debug builds.

Either way, should fix.

I will attach all of the relevant abc's to this ticket, as well as the generation method.

Comment 1

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: world.abc, fuzzed bit 1615

signals:
Assertion failed: "((i >= 0 && i < frameSize))" ("../core/FrameState-inlines.h":44)

Comment 2

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: world.abc, fuzzed bit 1919

signals:
Assertion failed: "((i >= 0 && i < frameSize))" ("../core/FrameState-inlines.h":44)

Comment 3

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: world.abc, fuzzed bit 1988

signals:
Assertion failed: "((i >= 0 && i < frameSize))" ("../core/FrameState-inlines.h":44)

Comment 4

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: world.abc, fuzzed bit 2068

signals:
Assertion failed: "((i >= 0 && i < frameSize))" ("../core/FrameState-inlines.h":44)

Comment 5

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: world.abc, fuzzed bit 3307

signals:
Assertion failed: "((vtable->traits == scopeTraits->traits()))" ("../core/ScopeChain.cpp":163)

Comment 6

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: original (unfuzzed) world.abc

Comment 7

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: source world.as for original (unfuzzed) world.abc

Comment 8

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: script I used to flip bits in input abc.

Comment 9

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: tworld.abc, fuzzed bit 1469

Comment 10

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: original (unfuzzed) tworld.abc

Comment 11

[Felix S. Klock II [:pnkfelix, :fklock]]

Attachment: source tworld.as for original (unfuzzed) tworld.abc

Comment 12

[Felix S. Klock II [:pnkfelix, :fklock]]

(In reply to Felix S Klock II from comment #9)
> Created attachment 593414 [details]
> tworld.abc, fuzzed bit 1469

Signals:
Assertion failed: "((flags != NS_Public ? apiVersion == kApiVersion_VM_ALLVERSIONS : true))" ("../core/Namespace.cpp":63)

Comment 13

[Sylvestre Ledru [:Sylvestre]]

Tamarin isn't maintained anymore. WONTFIX remaining bugs.