René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"fuzzing crash in `simplecpp::Macro::expandToken()`","articleBody":"```cpp\n#define P(p)defined E##p\nP()\n```\n\n```\nsimplecpp.cpp:2086:59: runtime error: member call on null pointer of type 'const struct Token'\n    #0 0x62ffeca183e7 in simplecpp::Macro::expandToken(simplecpp::TokenList*, simplecpp::Location const\u0026, simplecpp::Token const*, std::unordered_map\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, simplecpp::Macro, std::hash\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::equal_to\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::pair\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e const, simplecpp::Macro\u003e \u003e \u003e const\u0026, std::set\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, std::less\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e \u003e const\u0026, std::vector\u003csimplecpp::Token const*, std::allocator\u003csimplecpp::Token const*\u003e \u003e const\u0026) const /home/user/CLionProjects/simplecpp/simplecpp.cpp:2086\n    #1 0x62ffeca0d33d in simplecpp::Macro::expand(simplecpp::TokenList*, simplecpp::Location const\u0026, simplecpp::Token const*, std::unordered_map\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, simplecpp::Macro, std::hash\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::equal_to\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::pair\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e const, simplecpp::Macro\u003e \u003e \u003e const\u0026, std::set\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, std::less\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e \u003e) const /home/user/CLionProjects/simplecpp/simplecpp.cpp:1918\n    #2 0x62ffeca24768 in simplecpp::Macro::expand(simplecpp::TokenList*, simplecpp::Token const*, std::unordered_map\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, simplecpp::Macro, std::hash\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::equal_to\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::pair\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e const, simplecpp::Macro\u003e \u003e \u003e const\u0026, std::vector\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, std::allocator\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e \u003e\u0026) const /home/user/CLionProjects/simplecpp/simplecpp.cpp:1571\n    #3 0x62ffec996457 in preprocessToken /home/user/CLionProjects/simplecpp/simplecpp.cpp:3259\n    #4 0x62ffec9afafc in simplecpp::preprocess(simplecpp::TokenList\u0026, simplecpp::TokenList const\u0026, std::vector\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, std::allocator\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e \u003e\u0026, std::map\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e, simplecpp::TokenList*, std::less\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e \u003e, std::allocator\u003cstd::pair\u003cstd::__cxx11::basic_string\u003cchar, std::char_traits\u003cchar\u003e, std::allocator\u003cchar\u003e \u003e const, simplecpp::TokenList*\u003e \u003e \u003e\u0026, simplecpp::DUI const\u0026, std::__cxx11::list\u003csimplecpp::Output, std::allocator\u003csimplecpp::Output\u003e \u003e*, std::__cxx11::list\u003csimplecpp::MacroUsage, std::allocator\u003csimplecpp::MacroUsage\u003e \u003e*, std::__cxx11::list\u003csimplecpp::IfCond, std::allocator\u003csimplecpp::IfCond\u003e \u003e*) /home/user/CLionProjects/simplecpp/simplecpp.cpp:3747\n    #5 0x62ffec95f10b in main /home/user/CLionProjects/simplecpp/main.cpp:136\n    #6 0x7b7eb2234e07  (/usr/lib/libc.so.6+0x25e07) (BuildId: aed3a2b0cf4e6cc12296052529af22f6a450a75a)\n    #7 0x7b7eb2234ecb in __libc_start_main (/usr/lib/libc.so.6+0x25ecb) (BuildId: aed3a2b0cf4e6cc12296052529af22f6a450a75a)\n    #8 0x62ffec962b24 in _start (/home/user/CLionProjects/simplecpp/simplecpp+0xd0b24) (BuildId: 578f1f19369ff6da7f1b6f13ef333782db2d1107)\n```","author":{"url":"https://github.com/firewave","@type":"Person","name":"firewave"},"datePublished":"2025-02-10T12:29:54.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/409/simplecpp/issues/409"}