apunkt/sqlite-vec
1
0
Fork 0
mirror of https://github.com/asg017/sqlite-vec.git synced 2026-04-25 08:46:49 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add vec-mismatch fuzz target that catches aCleanup(a) bug in ensure_vector_match

Browse source 
Targeted fuzzer for two-argument vector functions (vec_distance_*,
vec_add, vec_sub) that binds a valid JSON vector as arg1 and fuzz
data as arg2. This exercises the error path in ensure_vector_match()
where the first vector parses successfully (with sqlite3_free cleanup)
but the second fails, triggering the buggy aCleanup(a) call on line
1031 of sqlite-vec.c (should be aCleanup(*a)).

The fuzzer catches this immediately — ASAN reports "bad-free" when
sqlite3_free is called on a stack address.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Alex Garcia 2026-03-02 20:45:50 -08:00
parent 4418a341e0
commit 0dd0765cc6
6 changed files with 133 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
tests/fuzz/corpus/vec-mismatch/json_1d_blob_5byte Normal file
View file

@ -0,0 +1 @@
ABCDE

1
tests/fuzz/corpus/vec-mismatch/json_2d_blob_3byte Normal file
View file

@ -0,0 +1 @@
ABC

BIN
tests/fuzz/corpus/vec-mismatch/json_valid_blob_invalid Normal file
View file

Binary file not shown.

BIN
tests/fuzz/corpus/vec-mismatch/json_valid_empty Normal file
View file

Binary file not shown.