Hi guys.
I ran into a failed assertion when generating a test corpus of random C programs:
$ jot 99999999 | xargs -n1 printf "/zbulk/csmith/%08d.c\n" | xargs -n1 -I{} sh -c 'src/csmith > {}'
Assertion failed: (lvars.size() == pointers.size()), function rhs_to_lhs_transfer, file FactPointTo.cpp, line 227.
xargs: sh: terminated with signal 6; aborting
xargs: printf: terminated with signal 13; aborting
More relevant info:
$ src/csmith -v
csmith 2.4.0
Git version: c05ee1d
$ uname -a
FreeBSD salt 11.1-RELEASE-p4 FreeBSD 11.1-RELEASE-p4 #0: Tue Nov 14 06:12:40 UTC 2017 root@amd64-builder.daemonology.net:/usr/obj/usr/src/sys/GENERIC amd64
The GDB backtrace contains no additional information because of optimization. I’ve attached the core file, though.
In this case, it seems the fuzzer fuzzed itself. :)
Thanks for your time,
Mike
Attachment:
csmith.core.xz
Description: Binary data