New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 621534 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Jul 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Integer-overflow in bad_int

Project Member Reported by ClusterFuzz, Jun 20 2016

Issue description

Comment 1 by mmoroz@chromium.org, Jun 20 2016

Cc: mmoroz@chromium.org mbarbe...@chromium.org kcc@chromium.org aizatsky@chromium.org
Components: Internals>Skia
Owner: hcm@chromium.org
Project Member

Comment 2 by ClusterFuzz, Jul 6 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6555007197642752

Fuzzer: libfuzzer_skia_path_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  bad_int
  any_bad_ints
  do_anti_hairline
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=400437:400524

Minimized Testcase (0.05 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95rUed2IJC72VN-O5rWA4BuV32nHrB5jPcdTmhAhgqEEmME-ynhsBUEFzoAlgc7EP1ADJsQ2FCdZfh_iQOkhYaLAOyZ_n_ERY2_CGXStNs43T89ds-43TPJpeDA2SaUcfVkxPNXL_RA1Blvhr_s63csTItRFA?testcase_id=6555007197642752

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 3 by ClusterFuzz, Jul 14 2016

ClusterFuzz has detected this issue as fixed in range 405220:405428.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6555007197642752

Fuzzer: libfuzzer_skia_path_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  bad_int
  any_bad_ints
  do_anti_hairline
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=400437:400524
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=405220:405428

Minimized Testcase (0.05 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95rUed2IJC72VN-O5rWA4BuV32nHrB5jPcdTmhAhgqEEmME-ynhsBUEFzoAlgc7EP1ADJsQ2FCdZfh_iQOkhYaLAOyZ_n_ERY2_CGXStNs43T89ds-43TPJpeDA2SaUcfVkxPNXL_RA1Blvhr_s63csTItRFA?testcase_id=6555007197642752

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Comment 4 by hcm@chromium.org, Jul 14 2016

Status: WontFix (was: Available)
Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment