[TOSprint] Can someone help me fuzz PDAL?

Pierre Abbat phma at bezitopo.org
Tue Nov 17 08:05:03 PST 2020


I compiled PDAL for fuzzing and ran this command:
afl-fuzz -m 400 -i in -o out -M fuzz0 ./bin/pdal info @@
I got this output:

[*] Attempting dry run with 'id:000000,time:0,orig:0102.las.wkt'...
[*] Spinning up the fork server...
[+] All right - fork server is up.
    len = 4389, map size = 9201, exec speed = 17917 us
[*] Attempting dry run with 'id:000001,time:0,orig:2-points.sbet'...
    len = 272, map size = 9201, exec speed = 12924 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000002,time:0,orig:B2.e57'...
    len = 4096, map size = 9201, exec speed = 13169 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000003,time:0,orig:ILVIS2_TEST_FILE.TXT'...
    len = 756, map size = 9201, exec speed = 13156 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000004,time:0,orig:array-pipeline.json.in'...
    len = 114, map size = 9201, exec speed = 13358 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000005,time:0,orig:autzen-utm10.las'...
    len = 4962, map size = 9201, exec speed = 11910 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000006,time:0,orig:autzen.mat'...
    len = 5836, map size = 9201, exec speed = 13160 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000007,time:0,orig:autzen.wld'...
    len = 89, map size = 9201, exec speed = 13138 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000008,time:0,orig:box.obj'...
    len = 410, map size = 9201, exec speed = 13123 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000009,time:0,orig:bunny_8.pts'...
    len = 248, map size = 9201, exec speed = 13045 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000010,time:0,orig:byte.tif'...
    len = 774, map size = 9201, exec speed = 13204 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000011,time:0,orig:byte.tif.aux.xml'...
    len = 351, map size = 9201, exec speed = 13119 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000012,time:0,orig:cleanup.sql'...
    len = 844, map size = 9201, exec speed = 13019 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000013,time:0,orig:data4a.dat'...
    len = 26, map size = 9201, exec speed = 12955 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000014,time:0,orig:file3.txt'...
    len = 72, map size = 9201, exec speed = 12973 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000015,time:0,orig:good_json_opt'...
    len = 39, map size = 9201, exec speed = 13099 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000016,time:0,orig:header.json'...
    len = 916, map size = 9201, exec speed = 13043 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000017,time:0,orig:hextest.las'...
    len = 387, map size = 9201, exec speed = 13018 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000018,time:0,orig:japanese-pr2135.txt'...
    len = 18, map size = 9201, exec speed = 12384 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000019,time:0,orig:pdalinfo_stage.txt'...
    len = 360, map size = 9201, exec speed = 13346 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000020,time:0,orig:plineSonoma3.json'...
    len = 440, map size = 9201, exec speed = 13276 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000021,time:0,orig:simple_binary.ply'...
    len = 244, map size = 9201, exec speed = 13098 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000022,time:0,orig:t1'...
    len = 26, map size = 9201, exec speed = 13017 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000023,time:0,orig:t2.txt'...
    len = 30, map size = 9201, exec speed = 13232 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000024,time:0,orig:threedim.py'...
    len = 88, map size = 9201, exec speed = 13112 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000025,time:0,orig:tile.txt'...
    len = 159, map size = 9201, exec speed = 13075 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000026,time:0,orig:twoPoints.h5'...
    len = 8192, map size = 9201, exec speed = 13312 us
[!] WARNING: No new instrumentation output, test case may be useless.
[*] Attempting dry run with 'id:000027,time:0,orig:utm15.bpf'...
    len = 896, map size = 9201, exec speed = 12969 us
[!] WARNING: No new instrumentation output, test case may be useless.
[+] All test cases processed.

I've had no such problem fuzzing my own code. I suspect that pdal may be 
executing or forking another process, which does the real work. Is that true, 
and what is this other process?

Pierre
-- 
Lanthanidia deliciosa: What the kiwifruit would be
if it weren't so radioactive.





More information about the TOSprint mailing list