Issue metadata
Sign in to add a comment
|
Heap-buffer-overflow in void v8::internal::String::WriteToFlat<unsigned short> |
||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5984162959327232 Fuzzer: stgao_chromebot2 Job Type: linux_asan_chrome_v8 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e000022137 Crash State: void v8::internal::String::WriteToFlat<unsigned short> v8::internal::GenericStringUtf16CharacterStream::FillBuffer v8::internal::BufferedUtf16CharacterStream::ReadBlock Recommended Security Severity: Medium Regressed: V8: r35710:35711 Minimized Testcase (2.27 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94HWu_Y1t-vHMoVrimUQuTCyF-NSoBoJsU84km_KFHK5szcP3brcHu7oSR9uuIki_dR1-CBPrp5KeeYDStVnrySsolBmaFyMD-yNwitWeVXBhDi2UAbLWYK9q_0IjMyGZbOK37yJpCx2mwMJe_0ipWf5zUXwg Filer: mbarbella See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Apr 29 2016
ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5984162959327232 Fuzzer: stgao_chromebot2 Job Type: linux_asan_chrome_v8 Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x62e000022137 Crash State: void v8::internal::String::WriteToFlat<unsigned short> v8::internal::GenericStringUtf16CharacterStream::FillBuffer v8::internal::BufferedUtf16CharacterStream::ReadBlock Recommended Security Severity: Medium Regressed: V8: r35710:35711 Minimized Testcase (2.27 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94HWu_Y1t-vHMoVrimUQuTCyF-NSoBoJsU84km_KFHK5szcP3brcHu7oSR9uuIki_dR1-CBPrp5KeeYDStVnrySsolBmaFyMD-yNwitWeVXBhDi2UAbLWYK9q_0IjMyGZbOK37yJpCx2mwMJe_0ipWf5zUXwg See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Apr 29 2016
,
May 2 2016
,
May 6 2016
,
May 6 2016
,
May 6 2016
,
Aug 12 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by mbarbe...@chromium.org
, Apr 28 2016