New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 626476 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 627387
Owner:
Closed: Jul 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Crash in SkSpecialImage_Raster::SkSpecialImage_Raster

Project Member Reported by ClusterFuzz, Jul 7 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6522998429581312

Fuzzer: sugoi_filter_fuzzer
Job Type: linux_asan_filter_fuzz_stub
Platform Id: linux

Crash Type: UNKNOWN WRITE
Crash Address: 0x000000000008
Crash State:
  SkSpecialImage_Raster::SkSpecialImage_Raster
  SkSpecialImage::MakeFromRaster
  SkAlphaThresholdFilterImpl::onFilterImage
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_filter_fuzz_stub&range=386714:386879

Minimized Testcase (0.27 Kb): https://cluster-fuzz.appspot.com/download/AMIfv974hFGXkT4xw06fdJ1PUc4RBaTfj5tW8S7dnd87VoyNpExsmtwWvuqTdLPmLl6XqM6fkNlFrUAb9IPkm27Da-Whb247ruxW5d_A3zPXXGmSrc1rAzM4e4niG3m9CZIaXBH7MEd4rw6EnmgYyj-wBSPA3I955A?testcase_id=6522998429581312

Filer: mummareddy

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Labels: findit-wrong Te-Logged M-52
Owner: robertphillips@chromium.org
Status: Assigned (was: Available)
From findit tool:

Author: robertphillips
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/3e302275b324172c845627cbd00cee8a06571baf
Time: Wed Apr 20 18:48:36 2016
The CL last changed line 59 of file SkSpecialImage.cpp, which is stack frame 5.

Author: robertphillips
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/3e302275b324172c845627cbd00cee8a06571baf
Time: Wed Apr 20 18:48:36 2016
The CL last changed line 25 of file SkSpecialImage.cpp, which is stack frame 6.

Suspected Project: chromium-buildtools
Mergedinto: 627387
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment