assimp / assimp/assimp

Bug: Issue 53925 in oss-fuzz: assimp:assimp_fuzzer: Floating-point-exception in Assimp::MDLImporter::InternReadFile_Quake1

Open
#4,819 1 comment 0 reactions 0 assignees View on GitHub
Bug Fuzzer MDL
Dominant language
C++
Stars
13.2k
Forks
3.2k
Avg merge
2d 8h
Merged PRs (30d)
21

Description

Status: New
Owner: ----
CC: kim.k...@[googlemail.com](http://googlemail.com/)
Labels: Restrict-View-Commit ClusterFuzz Stability-Memory-AddressSanitizer Reproducible Engine-libfuzzer OS-Linux Proj-assimp Reported-2022-12-02
Type: Bug

New issue 53925 by ClusterFuzz-External: assimp:assimp_fuzzer: Floating-point-exception in Assimp::MDLImporter::InternReadFile_Quake1
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53925

Detailed Report: https://oss-fuzz.com/testcase?key=4988099354820608

Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer
Job Type: libfuzzer_asan_assimp
Platform Id: linux

Crash Type: Floating-point-exception
Crash Address:
Crash State:
Assimp::MDLImporter::InternReadFile_Quake1
Assimp::MDLImporter::InternReadFile
Assimp::BaseImporter::ReadFile

Sanitizer: address (ASAN)

Regressed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_assimp&range=202211220607:202211230614

Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=4988099354820608

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for instructions to reproduce this bug locally.
When you fix this bug, please
* mention the fix revision(s).
* state whether the bug was a short-lived regression or an old bug in any stable releases.
* add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues. Comments on individual Monorail issues are not monitored.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.

Contributor guide

Open the contributing guide

Research direction

Download testcase 4988099354820608 and follow the OSS-Fuzz reproduction instructions first. Trace the crash from Assimp::MDLImporter::InternReadFile_Quake1 through the importer entry points, then verify that the testcase no longer produces a floating-point exception and that the reported regression is resolved.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
computer-graphics
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.