rust-fuzz/arbitrary

int_in_range_impl can panic on valid ranges

kpreid opened this issue · 2 comments

kpreid commented

arbitrary/src/unstructured.rs

Line 322 in a9c01d7

let delta = end - start;

This line can panic if end - start doesn't fit in the range of the number type, such as if start is near i32::MIN and end is near i32::MAX.

I discovered this via my fuzzing in CI (which uses such ranges) starting to fail after the release of arbitrary 1.1.4 a few hours ago.

Manishearth commented

This probably broke because of #118