Ticket #2080: sgs-nginx_latest.log

File sgs-nginx_latest.log, 16.2 KB (added by sungguoshuai@…, 6 years ago)

The full function stack of possible mem leak

Line 
1
2[1m[31m==13==ERROR: LeakSanitizer: detected memory leaks
3[1m[0m
4[1m[34mIndirect leak of 1128554496 byte(s) in 275526 object(s) allocated from:
5[1m[0m #0 0x5c3f17 in posix_memalign /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:226:3
6 #1 0x780ae0 in ngx_memalign /src/nginx/src/os/unix/ngx_alloc.c:57:11
7 #2 0x708328 in ngx_create_pool /src/nginx/src/core/ngx_palloc.c:23:9
8 #3 0x7c0e1d in ngx_http_alloc_request /src/nginx/src/http/ngx_http_request.c:550:12
9 #4 0x7c0a40 in ngx_http_create_request /src/nginx/src/http/ngx_http_request.c:511:9
10 #5 0x7c04a4 in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:493:15
11 #6 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
12 #7 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
13 #8 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
14 #9 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
15 #10 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
16 #11 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
17 #12 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
18 #13 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
19 #14 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
20 #15 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
21
22[1m[34mIndirect leak of 282137600 byte(s) in 275525 object(s) allocated from:
23[1m[0m #0 0x5c347d in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
24 #1 0x780920 in ngx_alloc /src/nginx/src/os/unix/ngx_alloc.c:22:9
25 #2 0x708a0e in ngx_palloc_large /src/nginx/src/core/ngx_palloc.c:220:9
26 #3 0x708840 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:131:12
27 #4 0x70e80b in ngx_create_temp_buf /src/nginx/src/core/ngx_buf.c:22:16
28 #5 0x7c0052 in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:408:13
29 #6 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
30 #7 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
31 #8 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
32 #9 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
33 #10 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
34 #11 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
35 #12 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
36 #13 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
37 #14 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
38 #15 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
39
40[1m[34mIndirect leak of 82354176 byte(s) in 10053 object(s) allocated from:
41[1m[0m #0 0x5c347d in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
42 #1 0x780920 in ngx_alloc /src/nginx/src/os/unix/ngx_alloc.c:22:9
43 #2 0x708a0e in ngx_palloc_large /src/nginx/src/core/ngx_palloc.c:220:9
44 #3 0x708840 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:131:12
45 #4 0x70e80b in ngx_create_temp_buf /src/nginx/src/core/ngx_buf.c:22:16
46 #5 0x7c9c1b in ngx_http_alloc_large_header_buffer /src/nginx/src/http/ngx_http_request.c:1626:13
47 #6 0x7c736c in ngx_http_process_request_line /src/nginx/src/http/ngx_http_request.c:1193:18
48 #7 0x7c04ed in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:500:5
49 #8 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
50 #9 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
51 #10 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
52 #11 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
53 #12 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
54 #13 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
55 #14 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
56 #15 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
57 #16 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
58 #17 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
59
60[1m[34mIndirect leak of 70534656 byte(s) in 275526 object(s) allocated from:
61[1m[0m #0 0x5c3f17 in posix_memalign /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:226:3
62 #1 0x780ae0 in ngx_memalign /src/nginx/src/os/unix/ngx_alloc.c:57:11
63 #2 0x708328 in ngx_create_pool /src/nginx/src/core/ngx_palloc.c:23:9
64 #3 0x5f6afd in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:290:13
65 #4 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
66 #5 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
67 #6 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
68 #7 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
69 #8 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
70 #9 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
71 #10 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
72 #11 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
73
74[1m[34mIndirect leak of 2650112 byte(s) in 647 object(s) allocated from:
75[1m[0m #0 0x5c3f17 in posix_memalign /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:226:3
76 #1 0x780ae0 in ngx_memalign /src/nginx/src/os/unix/ngx_alloc.c:57:11
77 #2 0x7095b2 in ngx_palloc_block /src/nginx/src/core/ngx_palloc.c:186:9
78 #3 0x708988 in ngx_palloc_small /src/nginx/src/core/ngx_palloc.c:173:12
79 #4 0x708859 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:127:16
80 #5 0x7c867e in ngx_list_init /src/nginx/src/core/ngx_list.h:39:23
81 #6 0x7c7b2f in ngx_http_process_request_line /src/nginx/src/http/ngx_http_request.c:1156:17
82 #7 0x7c04ed in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:500:5
83 #8 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
84 #9 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
85 #10 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
86 #11 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
87 #12 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
88 #13 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
89 #14 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
90 #15 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
91 #16 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
92 #17 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
93
94[1m[34mIndirect leak of 2573824 byte(s) in 10054 object(s) allocated from:
95[1m[0m #0 0x5c3f17 in posix_memalign /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:226:3
96 #1 0x780ae0 in ngx_memalign /src/nginx/src/os/unix/ngx_alloc.c:57:11
97 #2 0x7095b2 in ngx_palloc_block /src/nginx/src/core/ngx_palloc.c:186:9
98 #3 0x708988 in ngx_palloc_small /src/nginx/src/core/ngx_palloc.c:173:12
99 #4 0x708859 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:127:16
100 #5 0x708e69 in ngx_pcalloc /src/nginx/src/core/ngx_palloc.c:302:9
101 #6 0x70e7f4 in ngx_create_temp_buf /src/nginx/src/core/ngx_buf.c:17:9
102 #7 0x7c9c1b in ngx_http_alloc_large_header_buffer /src/nginx/src/http/ngx_http_request.c:1626:13
103 #8 0x7c736c in ngx_http_process_request_line /src/nginx/src/http/ngx_http_request.c:1193:18
104 #9 0x7c04ed in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:500:5
105 #10 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
106 #11 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
107 #12 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
108 #13 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
109 #14 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
110 #15 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
111 #16 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
112 #17 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
113 #18 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
114 #19 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
115
116[1m[34mIndirect leak of 32768 byte(s) in 4 object(s) allocated from:
117[1m[0m #0 0x5c347d in malloc /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:145:3
118 #1 0x780920 in ngx_alloc /src/nginx/src/os/unix/ngx_alloc.c:22:9
119 #2 0x708a0e in ngx_palloc_large /src/nginx/src/core/ngx_palloc.c:220:9
120 #3 0x708840 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:131:12
121 #4 0x70e80b in ngx_create_temp_buf /src/nginx/src/core/ngx_buf.c:22:16
122 #5 0x7c9c1b in ngx_http_alloc_large_header_buffer /src/nginx/src/http/ngx_http_request.c:1626:13
123 #6 0x7c8995 in ngx_http_process_request_headers /src/nginx/src/http/ngx_http_request.c:1370:22
124 #7 0x7c7c23 in ngx_http_process_request_line /src/nginx/src/http/ngx_http_request.c:1167:13
125 #8 0x7c04ed in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:500:5
126 #9 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
127 #10 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
128 #11 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
129 #12 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
130 #13 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
131 #14 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
132 #15 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
133 #16 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
134 #17 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
135 #18 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
136
137[1m[34mIndirect leak of 1024 byte(s) in 4 object(s) allocated from:
138[1m[0m #0 0x5c3f17 in posix_memalign /src/llvm-project/compiler-rt/lib/asan/asan_malloc_linux.cpp:226:3
139 #1 0x780ae0 in ngx_memalign /src/nginx/src/os/unix/ngx_alloc.c:57:11
140 #2 0x7095b2 in ngx_palloc_block /src/nginx/src/core/ngx_palloc.c:186:9
141 #3 0x708988 in ngx_palloc_small /src/nginx/src/core/ngx_palloc.c:173:12
142 #4 0x708859 in ngx_palloc /src/nginx/src/core/ngx_palloc.c:127:16
143 #5 0x708e69 in ngx_pcalloc /src/nginx/src/core/ngx_palloc.c:302:9
144 #6 0x70e7f4 in ngx_create_temp_buf /src/nginx/src/core/ngx_buf.c:17:9
145 #7 0x7c9c1b in ngx_http_alloc_large_header_buffer /src/nginx/src/http/ngx_http_request.c:1626:13
146 #8 0x7c8995 in ngx_http_process_request_headers /src/nginx/src/http/ngx_http_request.c:1370:22
147 #9 0x7c7c23 in ngx_http_process_request_line /src/nginx/src/http/ngx_http_request.c:1167:13
148 #10 0x7c04ed in ngx_http_wait_request_handler /src/nginx/src/http/ngx_http_request.c:500:5
149 #11 0x7bf964 in ngx_http_init_connection /src/nginx/src/http/ngx_http_request.c:360:9
150 #12 0x5f6d6c in TestOneProtoInput(HttpProto const&) /src/nginx/src/fuzz/http_request_fuzzer.cc:309:3
151 #13 0x5f6540 in LLVMFuzzerTestOneInput /src/nginx/src/fuzz/http_request_fuzzer.cc:242:1
152 #14 0x4fddc1 in fuzzer::Fuzzer::ExecuteCallback(unsigned char const*, unsigned long) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:556:15
153 #15 0x4fd505 in fuzzer::Fuzzer::RunOne(unsigned char const*, unsigned long, bool, fuzzer::InputInfo*, bool*) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:470:3
154 #16 0x4ff5d7 in fuzzer::Fuzzer::MutateAndTestOne() /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:698:19
155 #17 0x500055 in fuzzer::Fuzzer::Loop(std::__Fuzzer::vector<fuzzer::SizedFile, fuzzer::fuzzer_allocator<fuzzer::SizedFile> >&) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerLoop.cpp:832:5
156 #18 0x4ef02e in fuzzer::FuzzerDriver(int*, char***, int (*)(unsigned char const*, unsigned long)) /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerDriver.cpp:826:6
157 #19 0x517802 in main /src/llvm-project/compiler-rt/lib/fuzzer/FuzzerMain.cpp:19:10
158 #20 0x7fcb87cb382f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
159
160SUMMARY: AddressSanitizer: 1568838656 byte(s) leaked in 847339 allocation(s).
161INFO: to ignore leaks on libFuzzer side use -detect_leaks=0.
162
163MS: 5 CustomCrossOver-InsertRepeatedBytes-Custom-CustomCrossOver-CustomCrossOver-; base unit: 2009fdc9155b1a207b88315fbd2f67017f55b16d
164artifact_prefix='./'; Test unit written to ./leak-ade86cc88a180b9487ab1be9a85855f5afcd0806
165Running: docker run --rm --privileged -i -e FUZZING_ENGINE=libfuzzer -e SANITIZER=address -e RUN_FUZZER_MODE=interactive -v /home/oss-fuzz/build/out/nginx:/out -t gcr.io/oss-fuzz-base/base-runner run_fuzzer http_request_fuzzer -rss_limit_mb=0