{"action":"closed","issue":{"url":"https://api.github.com/repos/dvyukov/go-fuzz/issues/55","labels_url":"https://api.github.com/repos/dvyukov/go-fuzz/issues/55/labels{/name}","comments_url":"https://api.github.com/repos/dvyukov/go-fuzz/issues/55/comments","events_url":"https://api.github.com/repos/dvyukov/go-fuzz/issues/55/events","html_url":"https://github.com/dvyukov/go-fuzz/issues/55","id":97575628,"number":55,"title":"fuzzing github.com/andybalholm/cascadia crashes versifier","user":{"login":"andybalholm","id":868908,"avatar_url":"https://avatars.githubusercontent.com/u/868908?v=3","gravatar_id":"","url":"https://api.github.com/users/andybalholm","html_url":"https://github.com/andybalholm","followers_url":"https://api.github.com/users/andybalholm/followers","following_url":"https://api.github.com/users/andybalholm/following{/other_user}","gists_url":"https://api.github.com/users/andybalholm/gists{/gist_id}","starred_url":"https://api.github.com/users/andybalholm/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/andybalholm/subscriptions","organizations_url":"https://api.github.com/users/andybalholm/orgs","repos_url":"https://api.github.com/users/andybalholm/repos","events_url":"https://api.github.com/users/andybalholm/events{/privacy}","received_events_url":"https://api.github.com/users/andybalholm/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-07-27T23:02:28Z","updated_at":"2015-07-30T16:36:22Z","closed_at":"2015-07-30T16:36:22Z","body":"When I try to fuzz the CSS selector parsing code in github.com/andybalholm/cascadia, I get the following panic:\r\n\r\npanic: runtime error: slice bounds out of range\r\n\r\ngoroutine 28 [running]:\r\ngithub.com/dvyukov/go-fuzz/go-fuzz/versifier.structureKeyValue(0xc820328180, 0x2, 0x2, 0x0, 0x0, 0x0)\r\n\t/Users/andy/src/github.com/dvyukov/go-fuzz/go-fuzz/versifier/versifier.go:696 +0x489\r\ngithub.com/dvyukov/go-fuzz/go-fuzz/versifier.structure(0xc820328180, 0x2, 0x2, 0x0, 0x0, 0x0)\r\n\t/Users/andy/src/github.com/dvyukov/go-fuzz/go-fuzz/versifier/versifier.go:575 +0xdd\r\ngithub.com/dvyukov/go-fuzz/go-fuzz/versifier.BuildVerse(0xc82027a1b0, 0xc82020a960, 0x6, 0x6, 0x10000)\r\n\t/Users/andy/src/github.com/dvyukov/go-fuzz/go-fuzz/versifier/versifier.go:55 +0x1b9\r\nmain.(*Hub).loop(0xc820224100)\r\n\t/Users/andy/src/github.com/dvyukov/go-fuzz/go-fuzz/hub.go:236 +0x1c2c\r\ncreated by main.newHub\r\n\t/Users/andy/src/github.com/dvyukov/go-fuzz/go-fuzz/hub.go:115 +0xe83"}}