Package FuzzManager :: Package FTB :: Package Signatures :: Module test_CrashSignature
[hide private]
[frames] | no frames]

Module test_CrashSignature

source code

Created on Oct 9, 2014


Author: decoder

Classes [hide private]
  SignatureCreateTest
  SignatureTestCaseMatchTest
  SignatureStackFramesTest
  SignatureStackFramesAlgorithmsTest
  SignaturePCREShortTest
  SignatureStackFramesWildcardTailTest
  SignatureStackFramesRegressionTest
Variables [hide private]
  testTrace1 = 'Program received signal SIGSEGV, Segmentation fa...
  testTrace2 = 'Program terminated with signal 11, Segmentation ...
  testTrace3 = 'ASAN:SIGSEGV\n==================================...
  testTraceHeapWithCrashAddress = '\nProgram terminated with sig...
  testTraceHeapWithoutCrashAddress = '\nProgram terminated with ...
  testSignature1 = '{"symptoms": [\n {\n "functionName": "...
  testSignature2 = '{"symptoms": [\n {\n "functionName": "...
  testSignature3 = '{"symptoms": [\n {\n "functionName": "...
  testSignature4 = '{"symptoms": [\n {\n "functionName": "...
  testSignature5 = '{"symptoms": [\n {\n "functionName": "...
  testSignature6 = '{"symptoms": [\n {\n "functionName": "...
  testSignature7 = '{"symptoms": [\n {\n "type": "stackF...
  testCase1 = '\nfunction test() {\n var a = SIMD.float32x4();\...
  testSignatureStackFrames1 = '{"symptoms": [\n {\n "type"...
  testSignatureStackFrames2 = '{"symptoms": [\n {\n "type"...
  testSignatureStackFrames3 = '{"symptoms": [\n {\n "type"...
  testSignatureStackFrames4 = '{"symptoms": [\n {\n "type"...
  testSignatureStackFrames5 = '{"symptoms": [\n {\n "type"...
  testSignaturePCREShort1 = '{"symptoms": [\n {\n "functio...
  testSignaturePCREShort2 = '{"symptoms": [\n {\n "functio...
  testSignatureEmptyCrashAddress = '{"symptoms": [\n {\n "ad...
  __package__ = 'FuzzManager.FTB.Signatures'
Variables Details [hide private]

testTrace1

Value:
'''Program received signal SIGSEGV, Segmentation fault.
GetObjectAllocKindForCopy (obj=0x7ffff54001b0, nursery=...) at /srv/re\
pos/mozilla-central/js/src/gc/Nursery.cpp:369
369         if (obj->is<ArrayObject>()) {
#0  GetObjectAllocKindForCopy (obj=0x7ffff54001b0, nursery=...) at /sr\
v/repos/mozilla-central/js/src/gc/Nursery.cpp:369
#1  js::Nursery::moveToTenured (this=0x1673be0, trc=0x7fffffffa2d0, sr\
c=<optimized out>) at /srv/repos/mozilla-central/js/src/gc/Nursery.cpp\
...

testTrace2

Value:
'''Program terminated with signal 11, Segmentation fault.
#0  JSObject::markChildren (this=0x7fc33ef5a060, trc=0x3538be0)
    at /srv/repos/mozilla-central/js/src/jsobj.cpp:4081
4081        if (clasp->trace)
Loading JavaScript value pretty-printers; see js/src/gdb/README.
If they cause trouble, type: disable pretty-printer .* SpiderMonkey
#0  JSObject::markChildren (this=(JSObject * const) 0x7fc33ef5a060 Can\
not access memory at address 0x4949494949494949, trc=0x3538be0) at /sr\
...

testTrace3

Value:
'''ASAN:SIGSEGV
=================================================================
==7116==ERROR: AddressSanitizer: SEGV on unknown address 0x00000000001\
0 (pc 0x0000014662ba sp 0x7fffe804f180 bp 0x7fffe804f250 T0)
    #0 0x14662b9 in JSObject::getClass() const /home/ownhero/homes/moz\
illa/repos/mozilla-central/js/src/jsobj.h:128
    #1 0x14662b9 in bool JSObject::is<js::PropertyIteratorObject>() co\
nst /home/ownhero/homes/mozilla/repos/mozilla-central/js/src/jsobj.h:5\
...

testTraceHeapWithCrashAddress

Value:
'''
Program terminated with signal 11, Segmentation fault.
#0  0xe1afa070 in ?? ()
#0  0xe1afa070 in ?? ()
#1  0x00000000 in ?? ()
eax    0xfff869cc    -497204
ebx    0x9469ff4    155623412
ecx    0xe20f6cc0    -502305600
...

testTraceHeapWithoutCrashAddress

Value:
'''
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x00007f2b41e78087 in ?? ()
#1  0xfff9000000000000 in ?? ()
#2  0x4275203ba1949000 in ?? ()
#3  0x00007fff5330bb01 in ?? ()
#4  0x00007f2b44d83e40 in ?? ()
rax    0x7f2b42c45bc0    139823780486080
...

testSignature1

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature2

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature3

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature4

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature5

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature6

Value:
'''{"symptoms": [
    {
    "functionName": "GetObjectAllocKindForCopy",
    "frameNumber": 0,
    "type": "stackFrame"
  },
    {
    "functionName": "js::Nursery::moveToTenured",
...

testSignature7

Value:
'''{"symptoms": [
    {
      "type": "stackFrames", 
      "functionNames": [
        "js::UnwindIteratorForException", 
        "CloseLiveIterator", 
        "HandleExceptionIon", 
        "js::jit::HandleException"
...

testCase1

Value:
'''
function test() {
  var a = SIMD.float32x4();
  if (typeof reportCompare === "function")
    reportCompare(true, true);
}
test();
'''

testSignatureStackFrames1

Value:
'''{"symptoms": [
    {
    "type": "stackFrames", 
    "functionNames": [ "GetObjectAllocKindForCopy", "moveToTenured", "\
?", "MinorGCCallback", "MarkInternal<JSObject>" ]
  }
]}
'''

testSignatureStackFrames2

Value:
'''{"symptoms": [
    {
    "type": "stackFrames", 
    "functionNames": [ "GetObjectAllocKindForCopy", "moveToTenured", "\
?", "MinorGCCallback", "MinorGCCallback", "MarkInternal<JSObject>" ]
  }
]}
'''

testSignatureStackFrames3

Value:
'''{"symptoms": [
    {
    "type": "stackFrames", 
    "functionNames": [ "GetObjectAllocKindForCopy", "moveToTenured", "\
?", "?", "MarkInternal<JSObject>" ]
  }
]}
'''

testSignatureStackFrames4

Value:
'''{"symptoms": [
    {
    "type": "stackFrames", 
    "functionNames": [ "GetObjectAllocKindForCopy", "moveToTenured", "\
???", "MarkInternal<JSObject>" ]
  }
]}
'''

testSignatureStackFrames5

Value:
'''{"symptoms": [
    {
    "type": "stackFrames", 
    "functionNames": [ "GetObjectAllocKindForCopy", "moveToTenured", "\
?", "MarkInternal<JSObject>" ]
  }
]}
'''

testSignaturePCREShort1

Value:
'''{"symptoms": [
    {
    "functionName": "/.+KindForCopy/",
    "type": "stackFrame"
  }
]}
'''

testSignaturePCREShort2

Value:
'''{"symptoms": [
    {
    "functionName": "/^.KindForCopy/",
    "type": "stackFrame"
  }
]}
'''

testSignatureEmptyCrashAddress

Value:
'''{"symptoms": [
  {
    "address": "",
    "type": "crashAddress"
  }
]}
'''