google / google/oss-fuzz

OOM in Python-based projects do not show enough info

Open
#8,850 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
12.6k
Forks
2.9k
Avg merge
2d 2h
Merged PRs (30d)
62

Description

Examples:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47038
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47485
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47479

I believe there are missing information in OOM traces on oss-fuzz. The testcase shows that there is too much memory occupied and by which allocations, however the stack trace that identifies those allocations are just about the C part (e.g. in cpython or ASAN themselves). Thus it hides some of the useful info necessary to fix the bug, which is in what part of the fuzzed project (a python project) the allocations are.

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the three linked OSS-Fuzz reports and tracing how OOM information is produced for Python-based projects. Done means OOM traces expose the relevant allocations in the fuzzed Python project rather than only C-level frames.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
testing-qa
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.