Integer-overflow in WebRtcSpl_DotProductWithScale |
||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5869339328118784 Fuzzer: libfuzzer_audio_decoder_ilbc_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: WebRtcSpl_DotProductWithScale WebRtcIlbcfix_Smooth WebRtcIlbcfix_Enhancer Minimized Testcase (0.20 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97Tgybo9U79CueU-F4xMuKlcI0lOp2xZ2ihQ8lJgGDA4L8f7tsfikXwqOoCsSNH5VbHw7_saX6RMApAkrWRTnD8OUtldFGL4JgL0LoUnBB-aeOAD2opl8V0dTti4vwftU56p1HnuV6DX39vq94LxoiF4lUXiw Filer: mmoroz See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Apr 7 2016
,
Apr 8 2016
,
Apr 11 2016
Reducing the prio since the iLBC codec is not included in the Chrome build (just in this fuzzer binary).
,
Jun 11 2016
ClusterFuzz has detected this issue as fixed in range 398351:399229. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5869339328118784 Fuzzer: libfuzzer_audio_decoder_ilbc_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: WebRtcSpl_DotProductWithScale WebRtcIlbcfix_Smooth WebRtcIlbcfix_Enhancer Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=398351:399229 Minimized Testcase (0.20 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97UpibsWokmnZBSg5xYBheUh2YtECM5hDaiDmT-muELgkA6nO1YEB2uF9Rd5cLGe7oXcS1h86XWbjwQ7yavZmMaZdPrccwwNg8u-9jJ4t8znurRVVL8RMl6qflzLG8QZJJpWITMargHQRVdlDcLM-d61ASREQ See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 14 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
||||||
►
Sign in to add a comment |
||||||
Comment 1 by mmoroz@chromium.org
, Apr 7 2016Components: Blink>WebRTC>Audio
Labels: -Stability-Crash Stability-UndefinedBehaviorSanitizer
Owner: pbos@chromium.org