GNU bug report logs - #23549
parted needs to be afl-fuzzed (crash found on Debian, 3.2-15)

Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.

Package: parted; Reported by: Jacek Wielemborek <d33tah@HIDDEN>; dated Mon, 16 May 2016 15:30:02 UTC; Maintainer for parted is bug-parted@HIDDEN.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 16 May 2016 17:26:11 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon May 16 13:26:10 2016
Received: from localhost ([127.0.0.1]:54103 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1b2MHS-0005TI-J1
	for submit <at> debbugs.gnu.org; Mon, 16 May 2016 13:26:10 -0400
Received: from eggs.gnu.org ([208.118.235.92]:49019)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bcl@HIDDEN>) id 1b2MHR-0005T5-BF
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 13:26:10 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <bcl@HIDDEN>) id 1b2MHK-0003vx-UO
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 13:26:03 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_05 autolearn=disabled
 version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:50076)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <bcl@HIDDEN>) id 1b2MHK-0003vf-RZ
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 13:26:02 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:39938)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <bcl@HIDDEN>) id 1b2MHI-0003uw-89
 for bug-parted@HIDDEN; Mon, 16 May 2016 13:26:01 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <bcl@HIDDEN>) id 1b2MHC-0003tL-Mv
 for bug-parted@HIDDEN; Mon, 16 May 2016 13:25:58 -0400
Received: from mx1.redhat.com ([209.132.183.28]:38877)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <bcl@HIDDEN>) id 1b2MHC-0003t8-Gi
 for bug-parted@HIDDEN; Mon, 16 May 2016 13:25:54 -0400
Received: from int-mx09.intmail.prod.int.phx2.redhat.com
 (int-mx09.intmail.prod.int.phx2.redhat.com [10.5.11.22])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mx1.redhat.com (Postfix) with ESMTPS id C6CD6B672
 for <bug-parted@HIDDEN>; Mon, 16 May 2016 17:25:52 +0000 (UTC)
Received: from lister.brianlane.com (ovpn-112-111.phx2.redhat.com
 [10.3.112.111])
 by int-mx09.intmail.prod.int.phx2.redhat.com (8.14.4/8.14.4) with ESMTP id
 u4GHPnwT030844
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO)
 for <bug-parted@HIDDEN>; Mon, 16 May 2016 13:25:52 -0400
Date: Mon, 16 May 2016 10:25:49 -0700
From: "Brian C. Lane" <bcl@HIDDEN>
To: bug-parted@HIDDEN
Subject: Re: bug#23549: parted needs to be afl-fuzzed (crash found on Debian, 
 3.2-15)
Message-ID: <20160516172549.GJ9442@HIDDEN>
References: <5739B71F.3010001@HIDDEN>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <5739B71F.3010001@HIDDEN>
User-Agent: Mutt/1.6.0 (2016-04-01)
X-Scanned-By: MIMEDefang 2.68 on 10.5.11.22
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.5.16
 (mx1.redhat.com [10.5.110.38]); Mon, 16 May 2016 17:25:52 +0000 (UTC)
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.1 (----)
X-Debbugs-Envelope-To: submit
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.1 (----)

On Mon, May 16, 2016 at 02:03:43PM +0200, Jacek Wielemborek wrote:
> Hello,
> 
> The following base64-encoded device crashes parted 3.2 on "print all":

[snip]

> Let me know if you need any more help fuzzing - I'll be happy to help.

Tracebacks with debug symbols would also be helpful.

I'm pretty sure that fuzzing the MBR will result in all kinds of
interesting crashes.

-- 
Brian C. Lane | Anaconda Team | IRC: bcl #anaconda | Port Orchard, WA (PST8PDT)




Information forwarded to bug-parted@HIDDEN:
bug#23549; Package parted. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 16 May 2016 16:33:13 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon May 16 12:33:13 2016
Received: from localhost ([127.0.0.1]:54032 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1b2LSD-0002VO-HW
	for submit <at> debbugs.gnu.org; Mon, 16 May 2016 12:33:13 -0400
Received: from eggs.gnu.org ([208.118.235.92]:38077)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <d33tah@HIDDEN>) id 1b2IaD-0004PN-Jd
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 09:29:17 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2Ia7-0004q2-Hb
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 09:29:12 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=0.0 required=5.0 tests=BAYES_40,FREEMAIL_FROM,
 T_DKIM_INVALID autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:48697)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2Ia7-0004pi-6l
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 09:29:11 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:57257)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2Ia5-0005Rx-5o
 for bug-parted@HIDDEN; Mon, 16 May 2016 09:29:10 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2IZz-0004ok-3j
 for bug-parted@HIDDEN; Mon, 16 May 2016 09:29:08 -0400
Received: from mail-lf0-x22b.google.com ([2a00:1450:4010:c07::22b]:36851)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2IZy-0004og-Qj
 for bug-parted@HIDDEN; Mon, 16 May 2016 09:29:03 -0400
Received: by mail-lf0-x22b.google.com with SMTP id u64so117022249lff.3
 for <bug-parted@HIDDEN>; Mon, 16 May 2016 06:29:02 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=subject:to:references:from:message-id:date:mime-version:in-reply-to;
 bh=44/So9Iqy83ZwZmZSA2hOLY5EzS6x3FKrlwSYZiCDZs=;
 b=mhEb4IyxkP7F8wjyhOa9Qs59f/gEE8CsW6XitMeZW7AXKql7zxisnKdktcwlYJQYqd
 zbXvQ+Ok+9naaNfwcvH7wdBTcVAMJJFAv+jPdtNy7sD/QZ57Ek28i9C44UlmDDq8aUVt
 PFjI99CAloir6mP9sXpoUzAT0juCKQRhL+uNdg0LUQJ2ZSf+M9GtCp8CcI9y3snlagyi
 NE6HKzzAtK6w8C/M6GkySU58qHXAsIC/ni6vY8TA2YyH/qBPW5K2EF9Tftng8NqEMwpZ
 SDOH2thuRnCaa6lZdklOnzjsYPRINbGs7Mq+yk83AUIlg94szyAmIJxK4plYBKrQeTra
 bJcw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:subject:to:references:from:message-id:date
 :mime-version:in-reply-to;
 bh=44/So9Iqy83ZwZmZSA2hOLY5EzS6x3FKrlwSYZiCDZs=;
 b=YcCqUdSTzhhd8z3uJBsu65q+9U32UKjlgX72uZG1m6/6sHW2FsI7aTRMLrf7tO61j/
 r13M7xP59oETU5Nlfp7sv0RFLad8v64dS3z17G2U/qJbwDY4DMKhDgCQuKdTEhPHhPoQ
 Ewa7TnCy2stmxNbEIc563uk+Hs0IBgI7xdsnQquUgZ5Ma5c/8FD5HhEGPzEypkzhAosj
 4xt99Y9l7+PWe7ecxFpRW2S4feIX6OHcNmL4e6AJw3K4UFQ7ckxXC1jgrMjj5y1Jhe7a
 xg3Eaa7j0tsynaMNFDASB/EzqLOPmBIHE761OLLczsIR7+1vaHYMyUGaiYVK5mG92n4R
 oSmg==
X-Gm-Message-State: AOPr4FWffjwFHjNww92udIYlibiT4Vb7HRebs30kIJ7sA5mgwxzKadlDm3QmiFPYQLbclg==
X-Received: by 10.25.39.141 with SMTP id n135mr11335658lfn.98.1463405342025;
 Mon, 16 May 2016 06:29:02 -0700 (PDT)
Received: from [192.168.0.139] (83-168-109-70.static.espol.com.pl.
 [83.168.109.70])
 by smtp.googlemail.com with ESMTPSA id po7sm2470661lbb.16.2016.05.16.06.28.59
 for <bug-parted@HIDDEN> (version=TLSv1/SSLv3 cipher=OTHER);
 Mon, 16 May 2016 06:29:00 -0700 (PDT)
Subject: Re: parted needs to be afl-fuzzed (crash found on Debian, 3.2-15)
To: bug-parted@HIDDEN
References: <5739B71F.3010001@HIDDEN>
From: Jacek Wielemborek <d33tah@HIDDEN>
Message-ID: <5739CB16.7080707@HIDDEN>
Date: Mon, 16 May 2016 15:28:54 +0200
MIME-Version: 1.0
In-Reply-To: <5739B71F.3010001@HIDDEN>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="ho8xOQKf8mUqVLiigwuv1rI4gIxN1B7Rt"
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Mon, 16 May 2016 12:33:13 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--ho8xOQKf8mUqVLiigwuv1rI4gIxN1B7Rt
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

W dniu 16.05.2016 o 14:03, Jacek Wielemborek pisze:
> I couldn't reproduce the crash on Fedora 23 (3.26-16).

This one (xz-compressed, base64-encoded) crashes reproducibly:
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3D=3D

Just send it to:

base64 -d | xzcat > eeeee
parted -s eeeee print all


--ho8xOQKf8mUqVLiigwuv1rI4gIxN1B7Rt
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=t9pz
-----END PGP SIGNATURE-----

--ho8xOQKf8mUqVLiigwuv1rI4gIxN1B7Rt--




Information forwarded to bug-parted@HIDDEN:
bug#23549; Package parted. Full text available.

Message received at submit <at> debbugs.gnu.org:


Received: (at submit) by debbugs.gnu.org; 16 May 2016 15:29:37 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Mon May 16 11:29:37 2016
Received: from localhost ([127.0.0.1]:53893 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1b2KSe-0007e1-Ki
	for submit <at> debbugs.gnu.org; Mon, 16 May 2016 11:29:36 -0400
Received: from eggs.gnu.org ([208.118.235.92]:50702)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFj-0002BM-QH
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 08:04:04 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFd-0004xu-Lr
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 08:03:58 -0400
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00,FREEMAIL_FROM,
 T_DKIM_INVALID autolearn=disabled version=3.3.2
Received: from lists.gnu.org ([2001:4830:134:3::11]:34656)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFd-0004xp-Jz
 for submit <at> debbugs.gnu.org; Mon, 16 May 2016 08:03:57 -0400
Received: from eggs.gnu.org ([2001:4830:134:3::10]:41658)
 by lists.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFc-0002bh-7P
 for bug-parted@HIDDEN; Mon, 16 May 2016 08:03:57 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFX-0004vM-ST
 for bug-parted@HIDDEN; Mon, 16 May 2016 08:03:56 -0400
Received: from mail-lb0-x22c.google.com ([2a00:1450:4010:c04::22c]:33130)
 by eggs.gnu.org with esmtp (Exim 4.71)
 (envelope-from <d33tah@HIDDEN>) id 1b2HFW-0004uk-Uw
 for bug-parted@HIDDEN; Mon, 16 May 2016 08:03:51 -0400
Received: by mail-lb0-x22c.google.com with SMTP id jj5so49170175lbc.0
 for <bug-parted@HIDDEN>; Mon, 16 May 2016 05:03:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=to:from:subject:message-id:date:mime-version;
 bh=/1phTDYK66KJON+4DXKl2udOj7lOb1wB/nJ0vr+FxpU=;
 b=IlyQQvSO7oapOCLOBKfAbB5zKui5soF7YPLqOxRIRimwIgW0faYWWe48JsvutCmCBD
 arZR2HyMi+O3NTZNztbX42uELwyoqbVzgL5c02uNngDJYbe9bII31sp5dpGYhX94pY7u
 quH37sxNGKYpdqJ6MbP3XMOQH2r2sQNHUdJSexoX30DCilj/4fTUHJEDhiOIRuQk1Pub
 WkT/9Xb4OMqHeZJ4GWC9bAqwANWf6GBmuiWVzeqC2iVxoU/gNBV0qTSX/HhCgHCVRqmZ
 BVm9RqYK+qQ53tcCIhgZ6qKybHc2BIdGbHPC21Aq+Tf8NJnE7SMlPh9bx1DxjA+pG2bS
 zoCQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:to:from:subject:message-id:date:mime-version;
 bh=/1phTDYK66KJON+4DXKl2udOj7lOb1wB/nJ0vr+FxpU=;
 b=T3PY04qtjkjXBdkNQjoE+Q49VEOZ7h0cW0Lq6CWBMEF1QZwCFOp7zh7ZjoZM6VKnBh
 2DSfvUo4Ywj+xokRkdFLGPUIG4k3ZlQ7Jp+DJEtlYFSVYGzoO7lcnhMspR4QNBpaCjCS
 BKcY1J6gKwHtcWwQKTFtgUwsSyzj14nkeHb/2ykt66zgprtIfCUgzidrcEe99ZlKc8ek
 a39VwoyyN0XC2m56GW7cHpDM8eA/6MX0KXDcON0+aVqwW6gdog7e6vPFmH4v9gwbTB3y
 zkU0Dew0Ml3iwCueMZxkOEafBqkPzHhtNxz40LuNsD+nL6cugUZ5smqizcI2rf1suBFT
 fexA==
X-Gm-Message-State: AOPr4FXXEev/DSZtrrfXKy64Ow1pXd/I+jgsmG9S9iSvwxuMrlAJmqX3VDidh8TkgDvfvg==
X-Received: by 10.112.133.166 with SMTP id pd6mr11455739lbb.125.1463400229936; 
 Mon, 16 May 2016 05:03:49 -0700 (PDT)
Received: from [192.168.0.139] (83-168-109-70.static.espol.com.pl.
 [83.168.109.70])
 by smtp.googlemail.com with ESMTPSA id jn5sm5258819lbc.24.2016.05.16.05.03.48
 for <bug-parted@HIDDEN> (version=TLSv1/SSLv3 cipher=OTHER);
 Mon, 16 May 2016 05:03:49 -0700 (PDT)
To: bug-parted@HIDDEN
From: Jacek Wielemborek <d33tah@HIDDEN>
Subject: parted needs to be afl-fuzzed (crash found on Debian, 3.2-15)
X-Enigmail-Draft-Status: N0110
Message-ID: <5739B71F.3010001@HIDDEN>
Date: Mon, 16 May 2016 14:03:43 +0200
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="K5Xwpu87MrXP1x0UVpN6uOItCwEX6VIMC"
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]
X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x
X-Received-From: 2001:4830:134:3::11
X-Spam-Score: -4.0 (----)
X-Debbugs-Envelope-To: submit
X-Mailman-Approved-At: Mon, 16 May 2016 11:29:35 -0400
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--K5Xwpu87MrXP1x0UVpN6uOItCwEX6VIMC
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hello,

The following base64-encoded device crashes parted 3.2 on "print all":
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Here's an archive of input files I started fuzzing with:
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3D=3D

I used my afl-sid project [1] to generate the ASAN-augmented build and
the following command line to find a crash in 20 minutes:

afl-fuzz -d -i i2 -o o -m none -- parted -s @@ print all

I couldn't reproduce the crash on Fedora 23 (3.26-16).

Let me know if you need any more help fuzzing - I'll be happy to help.

Cheers,
d33tah

[1] https://github.com/d33tah/aflize


--K5Xwpu87MrXP1x0UVpN6uOItCwEX6VIMC
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=S+0k
-----END PGP SIGNATURE-----

--K5Xwpu87MrXP1x0UVpN6uOItCwEX6VIMC--




Acknowledgement sent to Jacek Wielemborek <d33tah@HIDDEN>:
New bug report received and forwarded. Copy sent to bug-parted@HIDDEN. Full text available.
Report forwarded to bug-parted@HIDDEN:
bug#23549; Package parted. Full text available.
Please note: This is a static page, with minimal formatting, updated once a day.
Click here to see this page with the latest information and nicer formatting.
Last modified: Mon, 16 May 2016 17:30:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.