PT-2022-37040

Name of the Vulnerable Software and Affected Versions DuckDB affected versions not specified Description The issue is related to a crash in DuckDB, specifically a segmentation fault on an unknown address. The crash occurs in the duckdb::ExpressionBinder::BindExpression function, which is also...

duckdb:parse_fuzz_test: Segv on unknown address in duckdb::ExpressionBinder::BindExpression

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=4806399030329344 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

duckdb:parse_fuzz_test: Crash in duckdb::Transformer::TransformSelectNode

Detailed Report: https://oss-fuzz.com/testcase?key=4967535171207168 Project: duckdb Fuzzing Engine: afl Fuzz Target: parsefuzztest Job Type: aflasanduckdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff801c Crash State: duckdb::Transformer::TransformSelectNode...

duckdb:parse_fuzz_test: Stack-buffer-overflow in bool duckdb::TryDecimalStringCast<duckdb::hugeint_t>

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5376498064818176 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

duckdb:parse_fuzz_test: Stack-buffer-overflow in bool duckdb::TryCast::Operation<duckdb::string_t, int>

Detailed Report: https://oss-fuzz.com/testcase?key=5746250188718080 Project: duckdb Fuzzing Engine: afl Fuzz Target: parsefuzztest Job Type: aflasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7ffc3d9e0050 Crash State: bool duckdb::TryCast::Operation int...

duckdb:parse_fuzz_test: Crash in duckdb::Transformer::TransformTypeName

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=5986892114952192 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fff801c Crash Stat...

duckdb:parse_fuzz_test: Segv on unknown address in duckdb::Transformer::TransformFuncCall

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=6131030948970496 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: parsefuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...

duckdb:parse_fuzz_test: Stack-buffer-overflow in duckdb::utf8proc_codepoint

Detailed Report: https://oss-fuzz.com/testcase?key=4918294185377792 Project: duckdb Fuzzing Engine: afl Fuzz Target: parsefuzztest Job Type: aflasanduckdb Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f7bd4251138 Crash State: duckdb::utf8proccodepoint...