Use-of-uninitialized-value in blink::LineBoxList::deleteLineBoxes |
|||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6555433150185472 Fuzzer: inferno_canvas_wrecker Job Type: linux_msan_chrome Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: blink::LineBoxList::deleteLineBoxes blink::LayoutBlockFlow::layoutInlineChildren blink::LayoutBlockFlow::layoutBlockFlow Recommended Security Severity: Medium Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97zK-W3BggybNsKOAmqSdimld5MWK341cHoc479cCHsPyPptY8oWTTm-Opm3fsmiQr2YX2TI6ZrkkR1jFCDuB8uu7rS66fMsPVRoFe5K_rKRV7NPI36L5hnZL6ZzcMjLZSs59g0XXjf8iJWW_OILjKtlt3NUGcL5e2cULyNdqQjRiqNr4Q?testcase_id=6555433150185472 Filer: tanin See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jun 28 2016
,
Jun 28 2016
,
Jun 29 2016
ClusterFuzz has detected this issue as fixed in range 402316:402437. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6555433150185472 Fuzzer: inferno_canvas_wrecker Job Type: linux_msan_chrome Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: blink::LineBoxList::deleteLineBoxes blink::LayoutBlockFlow::layoutInlineChildren blink::LayoutBlockFlow::layoutBlockFlow Recommended Security Severity: Medium Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_msan_chrome&range=402316:402437 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97zK-W3BggybNsKOAmqSdimld5MWK341cHoc479cCHsPyPptY8oWTTm-Opm3fsmiQr2YX2TI6ZrkkR1jFCDuB8uu7rS66fMsPVRoFe5K_rKRV7NPI36L5hnZL6ZzcMjLZSs59g0XXjf8iJWW_OILjKtlt3NUGcL5e2cULyNdqQjRiqNr4Q?testcase_id=6555433150185472 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 29 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Jun 29 2016
,
Oct 5 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 28
|
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by palmer@chromium.org
, Jun 28 2016Labels: M-53 OS-Android OS-Chrome OS-Mac OS-Windows
Owner: dsinclair@chromium.org
Status: Assigned (was: Available)