New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 614035 link

Starred by 0 users
Status: Duplicate
Merged: issue 603904
Owner: ----
Closed: May 2016
Cc:
kcc@chromium.org
mmoroz@chromium.org
█ aizatsky@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Direct-leak in CPDF_TextObject::Clone

Project Member Reported by ClusterFuzz, May 23 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6550998525149184

Fuzzer: pdfium_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Direct-leak
Crash Address: 
Crash State:
  CPDF_TextObject::Clone
  CPDF_StreamContentParser::AddTextObject
  CPDF_StreamContentParser::Handle_ShowText
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95pne05ud525siA-Scc2AOWOmomMp98p0G8ho57Aqd68JNeG2qxfdTpvH9zFsn7_hQ3wf-A-VDmOWuxShmTIe-fnRm3-Z2Glj32Ez-36uvWOAp5_14j_qX2TOjqZJcjpv7GDTzdT2t5o52EnjQyc8ebyV5uzg


Filer: mmoroz

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by mmoroz@chromium.org, May 23 2016

Cc: mmoroz@chromium.org kcc@chromium.org aizatsky@chromium.org
Components: Internals>Plugins>PDF
To reproduce:

$ ASAN_OPTIONS=detect_leaks=1:symbolize=1 ./out/Release/pdfium_fuzzer ./87078e73e5a854fbf693ac1fd5b0109ec8a42132 INFO: Seed: 1155934364
<...>/out/Release/pdfium_fuzzer: Running 1 inputs 1 time(s) each.
./87078e73e5a854fbf693ac1fd5b0109ec8a42132: 157 ms

=================================================================
==51356==ERROR: LeakSanitizer: detected memory leaks
<...>
87078e73e5a854fbf693ac1fd5b0109ec8a42132
1.5 KB View Download

Comment 2 by thestig@chromium.org, May 23 2016 

Isn't this  bug 603904 , which I just fixed?

Comment 3 by mmoroz@chromium.org, May 23 2016

Mergedinto: 603904
Status: Duplicate (was: Available)
Yes, it is. Sorry for the confusion, my bad (probably mistyped while checking for duplicates).
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment