Issue metadata
Sign in to add a comment
|
Use-of-uninitialized-value in webrtc::RtpDepacketizerH264::ProcessStapAOrSingleNalu |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5733923149840384 Fuzzer: libfuzzer_h264_depacketizer_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: webrtc::RtpDepacketizerH264::ProcessStapAOrSingleNalu webrtc::RtpDepacketizerH264::Parse webrtc::FuzzOneInput Recommended Security Severity: Medium Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=397381:397497 Minimized Testcase (0.05 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94UzLUW_-jlfpjxSn9Xin8_3cbRRdTDykg94nobRJxbmkCBmqsaJAi4iGWxKTuP4vX24ok1-HtLpzDDzjwq0bjZ13tOiGTxpbtF-fjBI-BsfpMHHQ44RdhW5xxJ7fN-likbBv60pAUeODqJc5MuoYyluVLmUg Filer: mmoroz See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Jun 6 2016
,
Jun 6 2016
,
Jun 6 2016
,
Jun 6 2016
,
Jun 7 2016
This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jun 10 2016
ClusterFuzz has detected this issue as fixed in range 398314:399191. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5733923149840384 Fuzzer: libfuzzer_h264_depacketizer_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: webrtc::RtpDepacketizerH264::ProcessStapAOrSingleNalu webrtc::RtpDepacketizerH264::Parse webrtc::FuzzOneInput Recommended Security Severity: Medium Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=397381:397497 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=398314:399191 Minimized Testcase (0.05 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97m0tsX8B0yz2Fa6XD6gVDHrJnI_GxBoSQ2kkvVmdb1QnhAQl7PM4VyzBYWgwXhoIqQUv69XER2FNc-ptgPCMHSFQZGSD7M_cYlpnU8KxJQCKTIAzIluJYeZxLyUPlS5mmgY90SW1tyJOirA00uPOkQq1yisg See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 13 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Jun 14 2016
,
Jun 14 2016
,
Jun 14 2016
Sorry for the incorrect ClusterFuzz update, please ignore it. Reopening bug.
,
Jun 15 2016
Please mark security bugs as fixed as soon as the fix lands, and before requesting merges. - Your friendly ClusterFuzz
,
Jul 27 2016
ClusterFuzz has detected this issue as fixed in range 398314:399191. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5733923149840384 Fuzzer: libfuzzer_h264_depacketizer_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: webrtc::RtpDepacketizerH264::ProcessStapAOrSingleNalu webrtc::RtpDepacketizerH264::Parse webrtc::FuzzOneInput Recommended Security Severity: Medium Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=397381:397497 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=398314:399191 Minimized Testcase (0.05 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97m0tsX8B0yz2Fa6XD6gVDHrJnI_GxBoSQ2kkvVmdb1QnhAQl7PM4VyzBYWgwXhoIqQUv69XER2FNc-ptgPCMHSFQZGSD7M_cYlpnU8KxJQCKTIAzIluJYeZxLyUPlS5mmgY90SW1tyJOirA00uPOkQq1yisg?testcase_id=5733923149840384 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 27 2016
Marked as fixed in M53, removing ReleaseBlock-Beta
,
Jul 27 2016
,
Sep 21 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 1 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 2 2016
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by mmoroz@chromium.org
, Jun 6 2016Cc: mmoroz@chromium.org kcc@chromium.org aizatsky@chromium.org
Owner: pbos@chromium.org