Issue metadata
Sign in to add a comment
|
Crash in CPDF_Array::GetDirectObjectAt |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4692029192011776 Fuzzer: lszekeres_pdf Job Type: linux_asan_pdfium Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000018 Crash State: CPDF_Array::GetDirectObjectAt CPDF_DataAvail::CheckHintTables CPDF_DataAvail::CheckDocStatus Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=357360:357514 Minimized Testcase (107.65 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96tYE3_l-5LxxECAX7pHeyQ9nu7RLsGNS8W16G_X6xZQ4uKrRUeYOu6uDnSVtkM9qYlgFShBkTUGZBblJC4bD-R4bla-aSnLBVOmfF9DtVDe7YWmHPHi2kVNGE0T7tuXZx05ZmZfRfskXWcjMz2EIoVm9BxJ36eOmRd4rQjM7ulVHiIFUU?testcase_id=4692029192011776 Filer: mummareddy See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jul 8 2016
,
Jul 8 2016
mummareddy: Isn't this bug 600709 ? The CF page says the crash is at r398017 and bug 600709 has been fixed as of r398496.
,
Jul 8 2016
Yes, same bug. i have not noticed revisions. Thanks
,
Jul 8 2016
,
Jul 9 2016
ClusterFuzz has detected this issue as fixed in range 398351:398496. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4692029192011776 Fuzzer: lszekeres_pdf Job Type: linux_asan_pdfium Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000018 Crash State: CPDF_Array::GetDirectObjectAt CPDF_DataAvail::CheckHintTables CPDF_DataAvail::CheckDocStatus Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=357360:357514 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_pdfium&range=398351:398496 Minimized Testcase (107.65 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96tYE3_l-5LxxECAX7pHeyQ9nu7RLsGNS8W16G_X6xZQ4uKrRUeYOu6uDnSVtkM9qYlgFShBkTUGZBblJC4bD-R4bla-aSnLBVOmfF9DtVDe7YWmHPHi2kVNGE0T7tuXZx05ZmZfRfskXWcjMz2EIoVm9BxJ36eOmRd4rQjM7ulVHiIFUU?testcase_id=4692029192011776 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
May 15 2017
|
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by mummare...@chromium.org
, Jul 8 2016Labels: Te-Logged M-52 M-51
Owner: tsepez@chromium.org
Status: Assigned (was: Available)