-
Notifications
You must be signed in to change notification settings - Fork 5.2k
Closed
Labels
Securityarea-System.IO.Compressionbugin-prThere is an active PR which will close this issue when it is mergedThere is an active PR which will close this issue when it is merged
Milestone
Description
Fuzzer was added in #114421
Process terminated.
Assertion failed.
zip64eocdLocatorProper && zip64EOCDLocator != null
at System.IO.Compression.Zip64EndOfCentralDirectoryLocator.TryReadBlock(Stream stream)
at System.IO.Compression.ZipArchive.TryReadZip64EndOfCentralDirectory(ZipEndOfCentralDirectoryBlock eocd, Int64 eocdStart)
at System.IO.Compression.ZipArchive.ReadEndOfCentralDirectory()
at System.IO.Compression.ZipArchive..ctor(Stream stream, ZipArchiveMode mode, Boolean leaveOpen, Encoding entryNameEncoding)
at DotnetFuzzing.Fuzzers.ZipArchiveFuzzer.TestArchive(Stream stream, Boolean async) in D:\a\_work\1\s\src\libraries\Fuzzing\DotnetFuzzing\Fuzzers\ZipArchiveFuzzer.cs:line 48
at DotnetFuzzing.Fuzzers.ZipArchiveFuzzer.TestArchive(Stream stream, Boolean async)
at DotnetFuzzing.Fuzzers.ZipArchiveFuzzer.FuzzTarget(ReadOnlySpan`1 bytes) in D:\a\_work\1\s\src\libraries\Fuzzing\DotnetFuzzing\Fuzzers\ZipArchiveFuzzer.cs:line 28
at DotnetFuzzing.Program.<>c__DisplayClass1_0.<RunFuzzer>b__0(ReadOnlySpan`1 bytes) in D:\a\_work\1\s\src\libraries\Fuzzing\DotnetFuzzing\Program.cs:line 91
at SharpFuzz.Fuzzer.LibFuzzer.Run(ReadOnlySpanAction action, Boolean ignoreExceptions)
at SharpFuzz.Fuzzer.LibFuzzer.Run(ReadOnlySpanAction action)
at DotnetFuzzing.Program.RunFuzzer(IFuzzer fuzzer, String inputFiles) in D:\a\_work\1\s\src\libraries\Fuzzing\DotnetFuzzing\Program.cs:line 86
at DotnetFuzzing.Program.Main(String[] args) in D:\a\_work\1\s\src\libraries\Fuzzing\DotnetFuzzing\Program.cs:line 67
at System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start[TStateMachine](TStateMachine& stateMachine)
at DotnetFuzzing.Program.Main(String[] args)
at DotnetFuzzing.Program.<Main>(String[] args)
Crash input Base64: UFBLBQYAAAAA//////9YaQRhAAAAAAAAAFBLBgcAAEsFBv//BQ==
You can repro it locally with .\deployment\ZipArchiveFuzzer\local-run.bat .\crash-input.bin from src\libraries\Fuzzing\DotnetFuzzing after building it.
Copilot
Metadata
Metadata
Labels
Securityarea-System.IO.Compressionbugin-prThere is an active PR which will close this issue when it is mergedThere is an active PR which will close this issue when it is merged