Re: [bison crash] Segmentation fault at fetch_type_name

Akim Demaille <[email protected]>
Newsgroups gmane.comp.parsers.bison.bugs
Message-ID <[email protected]>

> Le 6 mars 2020 à 06:45, Ahcheong Lee <[email protected]> a écrit :
> 
> Hello, this is Ahcheong Lee
> I'm currently working on a new fuzzing technique, and I found some crashes
> on GNU bison.

Hi,

This is the same bug as the one reported in https://lists.gnu.org/r/bug-bison/2020-03/msg00009.html: Segmentation fault with symbol_code_props_get at src/symtab.c:457.  So it is also fixed but the fix I sent.

commit 641e326303753575664ca146fee7e9148d6bf5cf (HEAD -> maint)
Author: Akim Demaille <[email protected]>
Date:   Fri Mar 6 09:05:52 2020 +0100

    code: be robust to reference with invalid tags
    
    Because we want to support $<a->b>$, we must accept -> in type tags,
    and reject $<->$, as it is unfinished.
    Reported by Ahcheong Lee.
    
    * src/scan-code.l (yylex): Make sure "tag" does not end with -, since
    -> does not close the tag.
    * tests/input.at (Stray $ or @): Check this.


Cheers!
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.