New issue
Advanced search Search tips
Starred by 0 users

Issue metadata

Status: Fixed
Owner:
Closed: Sep 2014
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 1
Type: Bug-Security



Sign in to add a comment

Use-of-uninitialized-value in cricket::WebRtcVoiceMediaChannel::SetupSharedBweOnChannel

Project Member Reported by ClusterFuzz, Sep 15 2014

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6292456229306368

Fuzzer: Phoglund_webrtc_peerconnection
Job Type: Linux_msan_chrome

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  cricket::WebRtcVoiceMediaChannel::SetupSharedBweOnChannel
  cricket::WebRtcVoiceMediaChannel::SetupSharedBandwidthEstimation
  cricket::WebRtcVideoMediaChannel::~WebRtcVideoMediaChannel
  

Minimized Testcase (8.04 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94YhPsrqpLJh1doNd6yerIJHCmC69MmASTiNOHjXZrzrrB0tBm1w8yZpP2G4RLH6JCe7_q4z7FiYRuMLzg5h_ljZya2l4UAolfDm80Wa-8d6YkslWvI1m3pKRdpGl906wZh0IFo2hTvEI_VcLyORzt_zK8Odw

Additional requirements: Requires HTTP

Filer: inferno
 
Cc: phoglund@chromium.org
Owner: asapersson@chromium.org
Status: Assigned
might be related/same as 409880
Project Member

Comment 2 by ClusterFuzz, Sep 15 2014

Labels: Cr-Blink-WebRTC Pri-1

Comment 3 by tsepez@chromium.org, Sep 16 2014

Labels: M-38
Likely same as 409880.

CL in progress:
https://critique.corp.google.com/#review/75187643
Fix submitted to WebRTC:
https://code.google.com/p/webrtc/source/detail?r=7235.
Status: Fixed
Rolled to chrome Sept 24 (5d589bd....).
Project Member

Comment 7 by ClusterFuzz, Sep 26 2014

Labels: -Restrict-View-SecurityTeam Merge-Triage M-39 M-37 Restrict-View-SecurityNotify
Adding Merge-Triage label for tracking purposes.

Once your fix had sufficient bake time (on canary, dev as appropriate), please nominate your fix for merge by adding the Merge-Requested label.

When your merge is approved by the release manager, please start merging with higher milestone label first. Make sure to re-request merge for every milestone in the label list. You can get branch information on omahaproxy.appspot.com.

Your fix is very close to the branch point. After the branch happens, please make sure to check if your fix is in.

- Your friendly ClusterFuzz
Labels: -M-38 -Merge-Triage -M-37 Release-0-M39
Project Member

Comment 9 by ClusterFuzz, Jan 2 2015

Labels: -Restrict-View-SecurityNotify
Bulk update: removing view restriction from closed bugs.
Project Member

Comment 10 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 11 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic

Sign in to add a comment