A SEGV signal occurred when running xar

[swtkiwi]

A SEGV signal occurred when running xar.

ASAN:SIGSEGV
=================================================================
==14321==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7fbf6cf8c746 bp 0x7ffdf4a464b0 sp 0x7ffdf4a45c38 T0)
    #0 0x7fbf6cf8c745 in strlen (/lib/x86_64-linux-gnu/libc.so.6+0x8b745)
    #1 0x7fbf6e1781b8 in strdup (/usr/lib/x86_64-linux-gnu/libasan.so.2+0x621b8)
    #2 0x455358 in xar_get_path lib/util.c:95
    #3 0x404af3 in print_file src/xar.c:214
    #4 0x410a8b in list src/xar.c:1525
    #5 0x41a9d5 in main src/xar.c:2667
    #6 0x7fbf6cf2182f in __libc_start_main (/lib/x86_64-linux-gnu/libc.so.6+0x2082f)
    #7 0x404838 in _start (/home/sandy/swt_fuzz/xar/xar/src/xar+0x404838)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: SEGV ??:0 strlen
==14321==ABORTING

The input file has been put at:
https://github.com/fCorleone/fuzz_programs/blob/master/xar/test1.dms

[abergmann]

CVE-2018-17093 was assigned to this issue.

[asarubbo]

If you have to search in million of bugs, well a duplicate can happen but since here there are just 9 bugs open

I don't know who requested the cve but it is clearly a duplicate.