New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 414525 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
User never visited
Closed: Oct 2014
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug-Security



Sign in to add a comment

Heap-buffer-overflow in opj_dwt_decode

Reported by cloudfuz...@gmail.com, Sep 16 2014

Issue description

VULNERABILITY DETAILS
The attached testcase crashes the latest asan build of pdfium_test:

=================================================================
==27481==ERROR: AddressSanitizer: heap-buffer-overflow on address 0xf1d035d8 at pc 0x08720b00 bp 0xffdad8b8 sp 0xffdad8b0
WRITE of size 4 at 0xf1d035d8 thread T0
    #0 0x8720aff in opj_dwt_interleave_h /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/dwt.c:248:7    #1 0x8720aff in opj_dwt_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/dwt.c:594:0    #2 0x8720aff in opj_dwt_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/dwt.c:475:0
    #3 0x869a60f in opj_tcd_dwt_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/tcd.c:1558:31    #4 0x869a60f in opj_tcd_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/tcd.c:1250:0
    #5 0x864e81f in opj_j2k_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:7661:15
    #6 0x866c541 in opj_j2k_decode_tiles /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:9177:23
    #7 0x8655f4e in opj_j2k_exec /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:7048:41    #8 0x8655f4e in opj_j2k_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:9368:0
    #9 0x84886cc in opj_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/openjpeg.c:413:10
    #10 0x847c680 in CJPX_Decoder::Init(unsigned char const*, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/codec/fx_codec_jpx_opj.cpp:624:15
    #11 0x847ea08 in CCodec_JpxModule::CreateDecoder(unsigned char const*, unsigned int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/codec/fx_codec_jpx_opj.cpp:764:10
    #12 0x83a350a in CPDF_DIBSource::LoadJpxBitmap() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:643:21
    #13 0x839c5ab in CPDF_DIBSource::CreateDecoder() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:599:9
    #14 0x83974e8 in CPDF_DIBSource::StartLoadDIBSource(CPDF_Document*, CPDF_Stream const*, int, CPDF_Dictionary*, CPDF_Dictionary*, int, unsigned int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:335:15
    #15 0x837ffc9 in CPDF_ImageCache::StartGetCachedBitmap(CPDF_Dictionary*, CPDF_Dictionary*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_cache.cpp:310:15
    #16 0x837fa32 in CPDF_PageRenderCache::StartGetCachedBitmap(CPDF_Stream*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_cache.cpp:131:15
    #17 0x83b06cb in CPDF_ProgressiveImageLoaderHandle::Start(CPDF_ImageLoader*, CPDF_ImageObject const*, CPDF_PageRenderCache*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:1489:15
    #18 0x83b1919 in CPDF_ImageLoader::StartLoadImage(CPDF_ImageObject const*, CPDF_PageRenderCache*, void*&, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:1549:19
    #19 0x838786a in CPDF_ImageRenderer::StartLoadDIBSource() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_image.cpp:371:9
    #20 0x8381f64 in CPDF_ImageRenderer::Start(CPDF_RenderStatus*, CPDF_PageObject const*, CFX_Matrix const*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_image.cpp:525:9
    #21 0x836eaae in CPDF_RenderStatus::ContinueSingleObject(CPDF_PageObject const*, CFX_Matrix const*, IFX_Pause*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:350:14
    #22 0x837b028 in CPDF_ProgressiveRenderer::Continue(IFX_Pause*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:1175:21
    #23 0x8379f57 in CPDF_ProgressiveRenderer::Start(CPDF_RenderContext*, CFX_RenderDevice*, CPDF_RenderOptions const*, IFX_Pause*, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:1114:5
    #24 0x811314b in FPDF_RenderPage_Retail(CRenderContext*, void*, int, int, int, int, int, int, int, IFSDK_PAUSE_Adapter*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/fpdfsdk/src/fpdfview.cpp:772:2
    #25 0x81139f8 in FPDF_RenderPageBitmap /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/fpdfsdk/src/fpdfview.cpp:574:2
    #26 0x810e656 in RenderPdf(char const*, char const*, unsigned int, OutputFormat) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/samples/pdfium_test.cc:324:5
    #27 0x810f3b4 in main /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/samples/pdfium_test.cc:406:7
    #28 0xf7195a82 in __libc_start_main ??:?
    #29 0x810d05b in _start ??:0:0

0xf1d035d8 is located 4 bytes to the right of 404-byte region [0xf1d03440,0xf1d035d4)
allocated by thread T0 here:
    #0 0x80ede21 in memalign _asan_rtl_:3
    #1 0x871f654 in opj_dwt_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/dwt.c:572:2    #2 0x871f654 in opj_dwt_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/dwt.c:475:0
    #3 0x869a60f in opj_tcd_dwt_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/tcd.c:1558:31    #4 0x869a60f in opj_tcd_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/tcd.c:1250:0
    #5 0x864e81f in opj_j2k_decode_tile /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:7661:15
    #6 0x866c541 in opj_j2k_decode_tiles /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:9177:23
    #7 0x8655f4e in opj_j2k_exec /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:7048:41    #8 0x8655f4e in opj_j2k_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/j2k.c:9368:0
    #9 0x84886cc in opj_decode /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/fx_libopenjpeg/src/../libopenjpeg20/openjpeg.c:413:10
    #10 0x847c680 in CJPX_Decoder::Init(unsigned char const*, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/codec/fx_codec_jpx_opj.cpp:624:15
    #11 0x847ea08 in CCodec_JpxModule::CreateDecoder(unsigned char const*, unsigned int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fxcodec/codec/fx_codec_jpx_opj.cpp:764:10
    #12 0x83a350a in CPDF_DIBSource::LoadJpxBitmap() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:643:21
    #13 0x839c5ab in CPDF_DIBSource::CreateDecoder() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:599:9
    #14 0x83974e8 in CPDF_DIBSource::StartLoadDIBSource(CPDF_Document*, CPDF_Stream const*, int, CPDF_Dictionary*, CPDF_Dictionary*, int, unsigned int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:335:15
    #15 0x837ffc9 in CPDF_ImageCache::StartGetCachedBitmap(CPDF_Dictionary*, CPDF_Dictionary*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_cache.cpp:310:15
    #16 0x837fa32 in CPDF_PageRenderCache::StartGetCachedBitmap(CPDF_Stream*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_cache.cpp:131:15
    #17 0x83b06cb in CPDF_ProgressiveImageLoaderHandle::Start(CPDF_ImageLoader*, CPDF_ImageObject const*, CPDF_PageRenderCache*, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:1489:15
    #18 0x83b1919 in CPDF_ImageLoader::StartLoadImage(CPDF_ImageObject const*, CPDF_PageRenderCache*, void*&, int, unsigned int, int, CPDF_RenderStatus*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp:1549:19
    #19 0x838786a in CPDF_ImageRenderer::StartLoadDIBSource() /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_image.cpp:371:9
    #20 0x8381f64 in CPDF_ImageRenderer::Start(CPDF_RenderStatus*, CPDF_PageObject const*, CFX_Matrix const*, int, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render_image.cpp:525:9
    #21 0x836eaae in CPDF_RenderStatus::ContinueSingleObject(CPDF_PageObject const*, CFX_Matrix const*, IFX_Pause*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:350:14
    #22 0x837b028 in CPDF_ProgressiveRenderer::Continue(IFX_Pause*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:1175:21
    #23 0x8379f57 in CPDF_ProgressiveRenderer::Start(CPDF_RenderContext*, CFX_RenderDevice*, CPDF_RenderOptions const*, IFX_Pause*, int) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/core/src/fpdfapi/fpdf_render/fpdf_render.cpp:1114:5
    #24 0x811314b in FPDF_RenderPage_Retail(CRenderContext*, void*, int, int, int, int, int, int, int, IFSDK_PAUSE_Adapter*) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/fpdfsdk/src/fpdfview.cpp:772:2
    #25 0x81139f8 in FPDF_RenderPageBitmap /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/fpdfsdk/src/fpdfview.cpp:574:2
    #26 0x810e656 in RenderPdf(char const*, char const*, unsigned int, OutputFormat) /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/samples/pdfium_test.cc:324:5
    #27 0x810f3b4 in main /home/bobthebuilder/chromium/src/out/Release/../../third_party/pdfium/samples/pdfium_test.cc:406:7
    #28 0xf7195a82 in __libc_start_main ??:?

SUMMARY: AddressSanitizer: heap-buffer-overflow ??:0 ??
Shadow bytes around the buggy address:
  0x3e3a0660: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x3e3a0670: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa
  0x3e3a0680: fa fa fa fa fa fa fa fa 00 00 00 00 00 00 00 00
  0x3e3a0690: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  0x3e3a06a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
=>0x3e3a06b0: 00 00 00 00 00 00 00 00 00 00 04[fa]fa fa fa fa
  0x3e3a06c0: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
  0x3e3a06d0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x3e3a06e0: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd
  0x3e3a06f0: fd fd fd fd fd fd fd fd fd fd fd fa fa fa fa fa
  0x3e3a0700: fa fa fa fa fa fa fa fa fd fd fd fd fd fd fd fd
Shadow byte legend (one shadow byte represents 8 application bytes):
  Addressable:           00
  Partially addressable: 01 02 03 04 05 06 07
  Heap left redzone:       fa
  Heap right redzone:      fb
  Freed heap region:       fd
  Stack left redzone:      f1
  Stack mid redzone:       f2
  Stack right redzone:     f3
  Stack partial redzone:   f4
  Stack after return:      f5
  Stack use after scope:   f8
  Global redzone:          f9
  Global init order:       f6
  Poisoned by user:        f7
  Container overflow:      fc
  Array cookie:            ac
  ASan internal:           fe
==27481==ABORTING


VERSION
Chrome Version: latest asan build of pdfium_test

REPRODUCTION CASE
attached in repro.pdf

 
repro.pdf
35.2 KB Download
Cc: jun_f...@foxitsoftware.com
Labels: Cr-Internals-Plugins-PDF
Owner: bo...@foxitsoftware.com
Status: Assigned
Project Member

Comment 2 by ClusterFuzz, Sep 16 2014

ClusterFuzz is analyzing your testcase. Chromium developers can follow the progress at https://cluster-fuzz.appspot.com/testcase?key=6035111419052032
Project Member

Comment 3 by ClusterFuzz, Sep 16 2014

Summary: Heap-buffer-overflow in opj_dwt_decode (was: Security: heap-buffer-overflow in opj_dwt_interleave_h)
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6035111419052032

Uploader: aarya@google.com
Job Type: Linux_asan_pdfium

Crash Type: Heap-buffer-overflow WRITE 4
Crash Address: 0x615000007f18
Crash State:
  opj_dwt_decode
  opj_tcd_decode_tile
  opj_j2k_decode_tile
  

Minimized Testcase (35.20 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97RDIh-12O0ywaud7A9-xwZKgs4RDlPbRvZpVkAtMjLs0dId6t7nuiJuYOXsPidIOMYvPq0eAJoiWL1XaiLv9ddP6Ud6FP3dzh_WSBCRslU_kD355I1q5EKovTiKC_NsmsuxUxiYcwjLDgCINuLVNK4lUk0wbA3oxWxnD6ELGZU-Wahw_Q


Comment 4 by tsepez@chromium.org, Sep 16 2014

Labels: Security_Impact-Stable Security_Severity-High M-38 Pri-1
Cc: jduart@google.com
Cc: noel@chromium.org
Cc: mathieu....@gmail.com anto...@gmail.com
+cc Libopenjpeg devs.

Antonin, Mathieu - can you please take a look at these libopenjpeg high severity security vulnerabilities asap. Feel free to port them to libopenjpeg bug tracker provided you can restrict view them [should not be open to public].
Cc: m.darb...@gmail.com
+cc m.darbois

Bo, Jun, what is the easy way to extract the image bits from pdf. Can you please attach them to these 11 bugs.
Project Member

Comment 9 by ClusterFuzz, Sep 23 2014

Labels: Nag
bo_xu@: Uh oh! This issue is still open and hasn't been updated in the last 7 days. Since this is a serious security vulnerability, we want to make sure progress is happening. Can you update the bug with current status, and what, if anything, is blocking?

If you are not the right Owner for this bug, please find someone else to own it as soon as possible and remove yourself as Owner.

If the issue is already fixed or you are to unable to reproduce it, please close the bug. (And thanks for fixing the bug!).

These nags can be disabled by adding a 'WIP' label and an optional codereview link.

- Your friendly ClusterFuzz
Project Member

Comment 10 by ClusterFuzz, Sep 30 2014

bo_xu@: Uh oh! This issue is still open and hasn't been updated in the last 7 days. Since this is a serious security vulnerability, we want to make sure progress is happening. Can you update the bug with current status, and what, if anything, is blocking?

If you are not the right Owner for this bug, please find someone else to own it as soon as possible and remove yourself as Owner.

If the issue is already fixed or you are to unable to reproduce it, please close the bug. (And thanks for fixing the bug!).

These nags can be disabled by adding a 'WIP' label and an optional codereview link.

- Your friendly ClusterFuzz
Project Member

Comment 11 by ClusterFuzz, Oct 8 2014

bo_xu@: Uh oh! This issue is still open and hasn't been updated in the last 7 days. Since this is a serious security vulnerability, we want to make sure progress is happening. Can you update the bug with current status, and what, if anything, is blocking?

If you are not the right Owner for this bug, please find someone else to own it as soon as possible and remove yourself as Owner.

If the issue is already fixed or you are to unable to reproduce it, please close the bug. (And thanks for fixing the bug!).

These nags can be disabled by adding a 'WIP' label and an optional codereview link.

- Your friendly ClusterFuzz
Project Member

Comment 12 by ClusterFuzz, Oct 15 2014

bo_xu@: Uh oh! This issue is still open and hasn't been updated in the last 7 days. Since this is a serious security vulnerability, we want to make sure progress is happening. Can you update the bug with current status, and what, if anything, is blocking?

If you are not the right Owner for this bug, please find someone else to own it as soon as possible and remove yourself as Owner.

If the issue is already fixed or you are to unable to reproduce it, please close the bug. (And thanks for fixing the bug!).

These nags can be disabled by adding a 'WIP' label and an optional codereview link.

- Your friendly ClusterFuzz
Project Member

Comment 14 by ClusterFuzz, Oct 22 2014

Labels: -Restrict-View-SecurityTeam Merge-Triage M-39 Restrict-View-SecurityNotify
Adding Merge-Triage label for tracking purposes.

Once your fix had sufficient bake time (on canary, dev as appropriate), please nominate your fix for merge by adding the Merge-Requested label.

When your merge is approved by the release manager, please start merging with higher milestone label first. Make sure to re-request merge for every milestone in the label list. You can get branch information on omahaproxy.appspot.com.

- Your friendly ClusterFuzz
Labels: -M-38 -Nag -Merge-Triage Merge-Requested
Labels: -Merge-Requested Merge-Approved
merge approved for m39 branch 2171.  please ensure this is merged by nov 3 - if this will be problematic please e-mail me.
Labels: Merge-Merged
Cc: amineer@chromium.org
Dev/Bug owner, please merge to M-39 branch 2171 asap. We need all these security fixes to go into the first stable.
Labels: -Merge-Approved Release-0-M39
Labels: reward-topanel
Labels: -reward-topanel reward-unpaid reward-3000 CVE-2014-7903
Thanks for the report! It qualified for a $3000 reward.
Labels: -reward-unpaid reward-inprogress
Payment in progress
Labels: -reward-inprogress reward-inprocess
Labels: -reward-inprocess
Processing via our e-payment system can take up to six weeks, but the reward should be on its way to you. Thanks again for your help!
Project Member

Comment 25 by ClusterFuzz, Jan 29 2015

Labels: -Restrict-View-SecurityNotify
Bulk update: removing view restriction from closed bugs.
Project Member

Comment 26 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 27 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic
Labels: CVE_description-submitted

Sign in to add a comment