New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 603901 link

Starred by 0 users
Status: Fixed
Owner:
jrumm...@chromium.org
Closed: Dec 2016
Cc:
kcc@chromium.org
mmoroz@google.com
chcunningham@chromium.org
wolenetz@chromium.org
tguilbert@chromium.org
█ aizatsky@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug

Blocking:
issue 591845



Sign in to add a comment

Direct-leak in av_realloc

Project Member Reported by ClusterFuzz, Apr 15 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6063744257359872

Fuzzer: media_pipeline_integration_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Direct-leak
Crash Address: 
Crash State:
  av_realloc
  av_reallocp
  fixup_vorbis_headers
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95e5q1UOn_-wbtwuKo13Bw1FAv8NIRpl9qXP3NUsqGjG1PxxfzpQZBds9FMQ-6_Vti-H69B6XcWGgLbgxKGVYpaqPZUS6zhOORv5vCDjUNylo80m-uca7ieKgutZEFBmnKIvaMokeKgzFJKQ7xPMWbBwOz9Eg


Filer: mmoroz

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by mmoroz@chromium.org, Apr 15 2016

Cc: kcc@chromium.org aizatsky@chromium.org
Owner: jrumm...@chromium.org

Comment 2 by jrumm...@chromium.org, May 3 2016

Blocking: 591845
Cc: chcunningham@chromium.org wolenetz@chromium.org tguilbert@chromium.org

Comment 3 by wolenetz@chromium.org, May 3 2016

Status: Assigned (was: Available)
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Comment 5 by wolenetz@chromium.org, Dec 2 2016 

jrummell@ Did the roll (M56  issue 591845 ) fix this? Regardless, the fix might be needed in M55 (and upstream ffmpeg, and a test added to ffmpeg_regression_tests).

Comment 6 by jrumm...@chromium.org, Dec 12 2016

Status: Fixed (was: Assigned)
This is no longer reproducible. Marking this as fixed by the ffmpeg roll.

[2016-12-06 21:12:03 UTC] Redo task(s): blame, impact, minimize, progression, regression
[2016-12-06 21:12:33 UTC] Minimize task started.
[2016-12-06 21:25:50 UTC] Minimize task errored out: Unable to reproduce crash.
[2016-12-06 21:26:13 UTC] Minimize task started.
[2016-12-06 21:40:55 UTC] Minimize task errored out: Unable to reproduce crash.
[2016-12-06 21:40:55 UTC] Minimize task errored out: Test case appears to be flaky.
►

Sign in to add a comment