[bison crash] Segmentation fault with symbol_code_props_get at src/symtab.c:457

[Ahcheong Lee]

Hello, this is Ahcheong Lee
I'm currently working on a new fuzzing technique, and I found some crashes
on GNU bison3.5.2.
For ease of maintenance, I'll send one crash by one by email.

There was a segmentation fault on symbol_code_props_get, src/symtab.c:457
You can reproduce it with the following command:
./bison <attached file>

This is call stack info:
Program received signal SIGSEGV, Segmentation fault.
0x000000000044cd53 in symbol_code_props_get (sym=0xffffffffffffffff,
kind=destructor) at src/symtab.c:457
457       if (sym->content->props[kind].code)
(gdb) bt
#0  0x000000000044cd53 in symbol_code_props_get (sym=0xffffffffffffffff,
kind=destructor) at src/symtab.c:457
#1  0x0000000000435296 in symbol_should_be_used (s=0x6a00a0,
midrule_warning=0x7fffffffe150) at src/reader.c:254
#2  0x0000000000435551 in grammar_rule_check_and_complete (r=0x6a3600) at
src/reader.c:328
#3  0x0000000000436385 in packgram () at src/reader.c:638
#4  0x0000000000436d9b in check_and_convert_grammar () at src/reader.c:839
#5  0x0000000000436992 in reader (gram=0x691bb0 "./tester26/id:000026") at
src/reader.c:722
#6  0x0000000000417e3d in main (argc=2, argv=0x7fffffffe378) at
src/main.c:104

Thank you,
Ahcheong Lee
---------------------------------------------
Ahcheong Lee, Master's student
School of Computing, KAIST
Room# 2438, E3-1, KAIST
373-1 Guseong-dong, Yuseong-gu
Daejeon, South Korea 34141
Phone : 010-7350-3811
------------------------------------------------

bison_symbol_code_props_get
Description: Binary data