Issue metadata
Sign in to add a comment
|
Global-buffer-overflow in WebRtcIsacfix_PitchFilterCore |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6384504238768128 Fuzzer: libfuzzer_audio_decoder_isacfix_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x0000005e5300 Crash State: WebRtcIsacfix_PitchFilterCore WebRtcIsacfix_PitchFilter WebRtcIsacfix_DecodeImpl Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=381907:381934 Minimized Testcase (0.02 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96OopBXdppUEVxVNwDUaoxcCiHpczoXh8hIoVawrvAKanDSI4MgSA7Bpg5uyOpI6MHHJDgDs-cmHWQ6NXlT3Dte3tJb_ENUIiJc-sZ9FC92xrf7Vfpst0TExjsXhz9jkKooILVkewTAejl6VcXM41VKIGN4EQ Filer: mmoroz See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Mar 20 2016
hlundin can you triage?
,
Mar 20 2016
,
Mar 21 2016
,
Mar 22 2016
,
Mar 25 2016
ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6384504238768128 Fuzzer: libfuzzer_audio_decoder_isacfix_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Global-buffer-overflow READ 2 Crash Address: 0x0000005e5300 Crash State: WebRtcIsacfix_PitchFilterCore WebRtcIsacfix_PitchFilter WebRtcIsacfix_DecodeImpl Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=381907:381934 Minimized Testcase (0.02 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96OopBXdppUEVxVNwDUaoxcCiHpczoXh8hIoVawrvAKanDSI4MgSA7Bpg5uyOpI6MHHJDgDs-cmHWQ6NXlT3Dte3tJb_ENUIiJc-sZ9FC92xrf7Vfpst0TExjsXhz9jkKooILVkewTAejl6VcXM41VKIGN4EQ See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 30 2016
kwiberg@, is this the same issue as you've already looked at?
,
Apr 4 2016
Yes, it's the same, because I can't reproduce this one now, but if I revert the bugfix for bug 581901 I can reproduce.
,
Jul 12 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by mmoroz@chromium.org
, Mar 20 2016