New issue
Advanced search Search tips

Issue 596531 link

Starred by 0 users
Status: Verified
Owner: ----
Closed: Jun 2016
Cc:
tsepez@chromium.org
ivancic@google.com
och...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Integer-overflow in CPDF_Page::GetDisplayMatrix

Project Member Reported by ClusterFuzz, Mar 21 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5638709432549376

Uploader: ivancic@google.com
Job Type: linux_ubsan_pdfium
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  CPDF_Page::GetDisplayMatrix
  CPDF_TextPage::CPDF_TextPage
  IPDF_TextPage::CreateTextPage
  

Minimized Testcase (1.21 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94-e0itAgHVq_yDyG0Mcjj8noe3S-WFFKF5fgVenNrkscW6sB9fgRcY_diJ90SxxrAbjydeGVvqFhPwVmYVG1Dbx-fdMdxtQDaBzWMHZRJhS55_6rDXgfjEyy7WCYAsEMZexzyX_m_wo7Ooi9eNQlBkVYUlAQ

Filer: ochang

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by och...@chromium.org, Mar 21 2016

Cc: ivancic@google.com
Components: Internals>Plugins>PDF

Comment 2 by thestig@chromium.org, Apr 15 2016

Cc: tsepez@chromium.org och...@chromium.org
Project Member

Comment 3 by ClusterFuzz, Jun 8 2016 

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5638709432549376

Uploader: ivancic@google.com
Job Type: linux_ubsan_pdfium
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  CPDF_Page::GetDisplayMatrix
  CPDF_TextPage::CPDF_TextPage
  IPDF_TextPage::CreateTextPage
  

Minimized Testcase (1.11 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97NZAlxm42o2lrPrivRqUhfsRWdIHAwZCHEXUqtaHA0W9XH-aWfYmE939qRNp7lvJr_g738XDfCUK6sdHxUMtzk2KUm_Fwo4QRA1bWkuK83wfoWupkySyg7c1gVzFyjtLFXX9fQNao-Skj_9BmQJ3DL299oGA

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Project Member

Comment 4 by ClusterFuzz, Jun 19 2016 

ClusterFuzz has detected this issue as fixed in range 400445:400609.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5638709432549376

Uploader: ivancic@google.com
Job Type: linux_ubsan_pdfium
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  CPDF_Page::GetDisplayMatrix
  CPDF_TextPage::CPDF_TextPage
  IPDF_TextPage::CreateTextPage
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_pdfium&range=370022:370027
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_pdfium&range=400445:400609

Minimized Testcase (1.11 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97NZAlxm42o2lrPrivRqUhfsRWdIHAwZCHEXUqtaHA0W9XH-aWfYmE939qRNp7lvJr_g738XDfCUK6sdHxUMtzk2KUm_Fwo4QRA1bWkuK83wfoWupkySyg7c1gVzFyjtLFXX9fQNao-Skj_9BmQJ3DL299oGA?testcase_id=5638709432549376

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Jun 19 2016

Labels: ClusterFuzz-Verified
Status: Verified (was: Available)
ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment