Issue metadata
Sign in to add a comment
|
Undefined-shift in opj_j2k_read_siz |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6371834743750656 Fuzzer: libfuzzer_pdf_jpx_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: opj_j2k_read_siz opj_j2k_read_header_procedure opj_j2k_exec Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=386932:386961 Minimized Testcase (0.14 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95dqmtEle5rd9fjIJCa3NBnQRyLgehXX0rvwDsyDsslFDtJlEv2CjDUSy5aCZh-wT5Yq5OU_sGmMV2j1ACf67Q01H8zwqVEaofCGB6T8s_0sZjv534kqEVK4qvFAADuOTs4918aFZFJzLLQuKlVQzQ098vJVw Filer: mmoroz See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Apr 15 2016
,
Jun 27 2016
ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6371834743750656 Fuzzer: libfuzzer_pdf_jpx_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: opj_j2k_read_siz opj_j2k_read_header_procedure opj_j2k_exec Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=386932:386961 Minimized Testcase (0.14 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96DS_C4bsx-eNdAXyyqqe5zfasIEug-wWctAnsmgZgFAXg8XN2kvNL8oM2lVIfGTgV9nF_jmZgRYUF89uw8aQe_PV0m0xF_ukZ1SP0uz-pqmJCzGeOKudrzQQXbsSFybIH7Jo507QT7WwYFgQdmrHIU83XpcQ?testcase_id=6371834743750656 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 29 2016
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5077723009777664 Fuzzer: libfuzzer_pdf_jpx_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: opj_j2k_read_siz opj_j2k_read_header_procedure opj_j2k_exec Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=395640:395746 Minimized Testcase (0.14 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96kp93y9uGO5V02e604T1nyWmKSdcxb_hf2AFqRsZ5Sc2pg0VbgAovdGVBSX_n7ua41RHlC2R50ag-cUYukCmTVscmLdQFQFRyf7KBExXH02g_oxcdMrvYio2AUzjBdhm91IpFFiReZkukyNgwvR5kQBy0w6g?testcase_id=5077723009777664 Filer: mmoroz See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Mar 2 2017
ClusterFuzz has detected this issue as fixed in range 453958:453992. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5077723009777664 Fuzzer: libfuzzer_pdf_jpx_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: opj_j2k_read_siz opj_j2k_read_header_procedure opj_j2k_read_header Sanitizer: undefined (UBSAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=395640:395746 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=453958:453992 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97VLR7YIHiOuZD77ggGceZfceK07QRxSJL9t3BKT1ar-5vj4rrTW5CdnCD54nA22xKPyN-KIfJbvXHGQDXG2fmEtESKQpYpnpMynoe-JcGIUCXeFHLxdxMd7Cm2ejR3M2du407oNjFyGfz-JkYWhF2z8WS39LdHdwZ-8BE7lA4Dv_l5K5vyBfKs_M05gBmySCTL0DgUO4vhbnD8KiE4xltK_uY-KOOdQrC9XpeU70ZFP04rO9AzLA8i0EOoGxJzejZ9z2cKyM145sEn4C0uULyv6_diElzPOoz36RztJel7JYvEAVxegytSAZpZFKH4MMh-uWAYfEieumEWj1xocbpyNiYfjaY19jSYMG7tw6ITnh82eFA?testcase_id=5077723009777664 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 2 2017
ClusterFuzz testcase 5077723009777664 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Mar 6 2017
This is reported again here issue 698498 with same regression range as above Comment # 6.Hence re-opening it and marking it available and duping the former into it. This is impacting to current Stable (56.0.2924.87) & Beta (57.0.2987.88). Could anyone take a look into this from PDF team.
,
Mar 6 2017
Issue 698498 has been merged into this issue.
,
Mar 7 2017
I'd rather dup into the bug with the unsolved testcase.
,
Sep 18 2017
We have made a bunch of changes on ClusterFuzz side, so resetting ClusterFuzz-Wrong label. |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by mmoroz@chromium.org
, Apr 14 2016Components: Internals>Plugins>PDF