Skip to content

cranelift-fuzzgen fuzzbug: called Option::unwrap() on a None value #4770

@cfallin

Description

@cfallin

https://oss-fuzz.com/testcase-detail/4997120972685312

The key bit of the stacktrace seems to be:

#11 0x5574eac7df1d in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_div_or_rem::h705de0e422e66fed [wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:0](https://github.com/bytecodealliance/wasmtime/blob/9cb987c678f93e7d30fb702aece7dad641a0f007/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs#L0)
    #12 0x5574eac8a293 in cranelift_codegen::isa::x64::lower::isle::generated_code::constructor_lower::h333a555f0bbc7d8f [wasmtime/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs:12045](https://github.com/bytecodealliance/wasmtime/blob/9cb987c678f93e7d30fb702aece7dad641a0f007/target/x86_64-unknown-linux-gnu/release/build/cranelift-codegen-2a8c5675489ecc10/out/isle_x64.rs#L12045):35
    #13 0x5574eaa909f7 in cranelift_codegen::isa::x64::lower::isle::lower::_$u7b$$u7b$closure$u7d$$u7d$::ha3d0d741e3b3abcc [wasmtime/cranelift/codegen/src/isa/x64/lower/isle.rs:69](https://github.com/bytecodealliance/wasmtime/blob/9cb987c678f93e7d30fb702aece7dad641a0f007/cranelift/codegen/src/isa/x64/lower/isle.rs#L69):20

or an incomplete match in the div_or_rem term.

Input (base64'd):

ARUg////AAD/ARk6IA==

cc @afonso360

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions