Orionix03 commited on
Commit
d571ec4
·
verified ·
1 Parent(s): ee60336

Upload asan_ptd_nullderef.txt

Browse files
Files changed (1) hide show
  1. asan_ptd_nullderef.txt +25 -0
asan_ptd_nullderef.txt ADDED
@@ -0,0 +1,25 @@
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ [poc] wrote poc/evil_nullderef.ptd (256 bytes)
2
+ [poc] calling get_tensor_layout("w") ...
3
+ AddressSanitizer:DEADLYSIGNAL
4
+ =================================================================
5
+ ==4761==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000004 (pc 0x000100d1e530 bp 0x00016f106150 sp 0x00016f105e40 T0)
6
+ ==4761==The signal is caused by a READ memory access.
7
+ ==4761==Hint: address points to the zero page.
8
+ #0 0x000100d1e530 in executorch::runtime::TensorLayout::create(executorch::runtime::Span<int const>, executorch::runtime::Span<unsigned char const>, executorch::runtime::etensor::ScalarType) tensor_layout.cpp:59
9
+ #1 0x000100d132cc in executorch::extension::(anonymous namespace)::create_tensor_layout(flat_tensor_flatbuffer::TensorLayout const*) flat_tensor_data_map.cpp:121
10
+ #2 0x000100d12260 in executorch::extension::FlatTensorDataMap::get_tensor_layout(std::__1::basic_string_view<char, std::__1::char_traits<char>>) const flat_tensor_data_map.cpp:143
11
+ #3 0x000100cf9530 in main craft_and_load_ptd.cpp:95
12
+ #4 0x00018855dd50 in start+0x1c0c (dyld:arm64e+0x8d50)
13
+
14
+ ==4761==Register values:
15
+ x[0] = 0x000000016f105e60 x[1] = 0x0000000000000000 x[2] = 0x0000000000000000 x[3] = 0x000000016f105e30
16
+ x[4] = 0x000000016f105e40 x[5] = 0x000000016f106460 x[6] = 0x0000000000000004 x[7] = 0x0000000000000001
17
+ x[8] = 0x0000000000000004 x[9] = 0x0000000000000004 x[10] = 0x000000702de40bc5 x[11] = 0x000000002de20bc5
18
+ x[12] = 0x000000002de20bc5 x[13] = 0x0000000000000000 x[14] = 0x0000000000000000 x[15] = 0x000060f0000000e0
19
+ x[16] = 0x0000000100d1f358 x[17] = 0x0000000101514548 x[18] = 0x0000000000000000 x[19] = 0x000000016f105f80
20
+ x[20] = 0x00000001f4ba1248 x[21] = 0x00000001f48f4e10 x[22] = 0xfffffffffffffff0 x[23] = 0x00000001f4ba4960
21
+ x[24] = 0x0000000000000001 x[25] = 0x000000016f106ce0 x[26] = 0x00000001f4ba4970 x[27] = 0x0000000000000000
22
+ x[28] = 0x0000000000000000 fp = 0x000000016f106150 lr = 0x0000000100d1e4d4 sp = 0x000000016f105e40
23
+ AddressSanitizer can not provide additional info.
24
+ SUMMARY: AddressSanitizer: SEGV tensor_layout.cpp:59 in executorch::runtime::TensorLayout::create(executorch::runtime::Span<int const>, executorch::runtime::Span<unsigned char const>, executorch::runtime::etensor::ScalarType)
25
+ ==4761==ABORTING