[google/syzkaller] 9451e1: pkg/corpus: reset slice header instead of zeroing ...

0 views
Skip to first unread message

Aleksandr Nogikh

unread,
Aug 3, 2026, 2:13:45 PM (6 days ago) Aug 3
to syzk...@googlegroups.com
Branch: refs/heads/gh-readonly-queue/master/pr-7721-a68cb31bde00145c1bf55e7d89ffb7845bfc87fb
Home: https://github.com/google/syzkaller
Commit: 9451e17ec45e2d8a77487269d360bc27d855a95f
https://github.com/google/syzkaller/commit/9451e17ec45e2d8a77487269d360bc27d855a95f
Author: Aleksandr Nogikh <nog...@google.com>
Date: 2026-08-03 (Mon, 03 Aug 2026)

Changed paths:
M pkg/corpus/prio.go

Log Message:
-----------
pkg/corpus: reset slice header instead of zeroing backing array in clear()

When Corpus.Minimize() runs, ProgramsList.clear() used to execute clear() on
the progs slice. Because Corpus.Programs() shares the backing array with
pl.progs, clear() zeroed out elements to nil while worker threads were actively
iterating over their snapshot. This led to nil pointer dereference panics.

Instead of zeroing the backing array, reset pl.progs and pl.accPrios to nil.
Worker threads can continue reading safely from the old immutable array,
while new additions allocate a fresh backing array without hot-path overhead.



To unsubscribe from these emails, change your notification settings at https://github.com/google/syzkaller/settings/notifications

Aleksandr Nogikh

unread,
Aug 3, 2026, 2:27:40 PM (6 days ago) Aug 3
to syzk...@googlegroups.com
Branch: refs/heads/master
Reply all
Reply to author
Forward
0 new messages