Crash in CFX_MapPtrToPtr::RemoveAll |
|||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6712492100681728 Uploader: ivancic@google.com Job Type: linux_ubsan_pdfium Platform Id: linux Crash Type: UNKNOWN Crash Address: Crash State: CFX_MapPtrToPtr::RemoveAll CPDFSDK_InterForm::~CPDFSDK_InterForm CPDFSDK_InterForm::~CPDFSDK_InterForm Minimized Testcase (2.74 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94cyrTKtokp0rVLqXszR6f5GUeIC4tR_z9rmSyEbtuS5xj7-itOQRViWk1InLgRaiISnWtK99ffKaN0WFtiHMUueuvawVGGNC4Clc8UwgMDOvjzBmUF44E_oljMTHmmcMbrr-zKYaDoPX0ebBeLjCfcV3PMNA Filer: ochang See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Apr 15 2016
,
May 19 2016
I asked CF to Redo -> Fixed to recheck this, since CFX_MapPtrToPtr is XFA only now.
,
May 19 2016
https://codereview.chromium.org/1991123002
,
May 19 2016
Issue 613029 has been merged into this issue.
,
May 20 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/7b8558259b7a7c4d6ce5fc71a0af1983e8363872 commit 7b8558259b7a7c4d6ce5fc71a0af1983e8363872 Author: thestig <thestig@chromium.org> Date: Fri May 20 04:30:07 2016 Roll PDFium 8bdb290..8b45eb1 https://pdfium.googlesource.com/pdfium.git/+log/8bdb290..8b45eb1 BUG= 603904 , 613032 , 596528 , 596530 , 603895 , 603903 TBR=ochang@chromium.org Review-Url: https://codereview.chromium.org/1997993002 Cr-Commit-Position: refs/heads/master@{#394997} [modify] https://crrev.com/7b8558259b7a7c4d6ce5fc71a0af1983e8363872/DEPS
,
May 20 2016
ClusterFuzz has detected this issue as fixed in range 382185:382588. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6712492100681728 Uploader: ivancic@google.com Job Type: linux_ubsan_pdfium Platform Id: linux Crash Type: UNKNOWN Crash Address: Crash State: CFX_MapPtrToPtr::RemoveAll CPDFSDK_InterForm::~CPDFSDK_InterForm CPDFSDK_InterForm::~CPDFSDK_InterForm Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_pdfium&range=382185:382588 Minimized Testcase (2.74 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94cyrTKtokp0rVLqXszR6f5GUeIC4tR_z9rmSyEbtuS5xj7-itOQRViWk1InLgRaiISnWtK99ffKaN0WFtiHMUueuvawVGGNC4Clc8UwgMDOvjzBmUF44E_oljMTHmmcMbrr-zKYaDoPX0ebBeLjCfcV3PMNA See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
May 20 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by och...@chromium.org
, Mar 21 2016Components: Internals>Plugins>PDF