-
-
Notifications
You must be signed in to change notification settings - Fork 50
Closed
Labels
bugSomething isn't workingSomething isn't working
Milestone
Description
Reproducer
I tried this code:
#![no_main]
use libfuzzer_sys::{fuzz_target, Corpus};
use lofty::file::AudioFile;
use lofty::file::{FileType, TaggedFileExt};
use lofty::probe::Probe;
const ALL_FILE_TYPES: &[FileType] = &[
FileType::Aac,
FileType::Aiff,
FileType::Ape,
FileType::Flac,
FileType::Mpeg,
FileType::Mp4,
FileType::Mpc,
FileType::Opus,
FileType::Vorbis,
FileType::Speex,
FileType::Wav,
FileType::WavPack,
];
fuzz_target!(|data: &[u8]| -> Corpus {
let mut corpus = Corpus::Reject;
for i in ALL_FILE_TYPES {
let s = std::io::Cursor::new(data);
let tagged_file = match Probe::with_file_type(s, *i).read() {
Ok(t) => t,
Err(_e) => {
continue;
}
};
corpus = Corpus::Keep;
tagged_file.properties();
tagged_file.tags();
tagged_file.primary_tag();
}
corpus
});
Summary
thread 'main' panicked at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/id3/v2/read.rs:90:45:
byte index 2 is not a char boundary; it is inside 'à' (bytes 1..3) of `3àL`
stack backtrace:
0: rust_begin_unwind
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/std/src/panicking.rs:662:5
1: core::panicking::panic_fmt
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/core/src/panicking.rs:74:14
2: core::str::slice_error_fail_rt
3: core::str::slice_error_fail
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/core/src/str/mod.rs:68:5
4: core::str::traits::<impl core::slice::index::SliceIndex<str> for core::ops::range::RangeTo<usize>>::index
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/core/src/str/traits.rs:470:21
5: core::str::traits::<impl core::ops::index::Index<I> for str>::index
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/core/src/str/traits.rs:60:15
6: lofty::id3::v2::read::construct_tdrc_from_v3
at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/id3/v2/read.rs:90:36
7: lofty::id3::v2::read::parse_id3v2
at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/id3/v2/read.rs:46:3
8: lofty::mpeg::read::read_from
at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/mpeg/read.rs:47:18
9: <lofty::mpeg::MpegFile as lofty::file::audio_file::AudioFile>::read_from
at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/mpeg/mod.rs:17:10
10: lofty::probe::Probe<R>::read
at /home/rafal/.cargo/git/checkouts/lofty-rs-f5e48f8219b271cf/4a2bcf5/lofty/src/probe.rs:472:23
11: lofty::check_file
at /home/rafal/Projekty/Rust/run_command_for_every_file/src/crates/lofty/src/main.rs:42:33
12: lofty::main
at /home/rafal/Projekty/Rust/run_command_for_every_file/src/crates/lofty/src/main.rs:26:9
13: core::ops::function::FnOnce::call_once
at /rustc/f6e511eec7342f59a25f7c0534f1dbea00d01b14/library/core/src/ops/function.rs:250:5
note: Some details are omitted, run with `RUST_BACKTRACE=full` for a verbose backtrace.
Aborted (core dumped)
Expected behavior
No response
Assets
crash-b8f2fc10e2ab6c4e60c371aea3949871fc61a39b_minimized.zip
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working