Issue metadata
Sign in to add a comment
|
Heap-use-after-free in GURL::GURL |
||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5624318482710528 Fuzzer: inferno_layout_test_unmodified Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x7d500000db68 Crash State: GURL::GURL content::MediaPermissionDispatcher::HasPermission content::FilteringNetworkManager::CheckPermission Recommended Security Severity: High Minimized Testcase (0.09 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv953PDiiu82aiEVA_ryBPTd2eoyu1ryGAm8rpOW1-fHXOT513eoAT5qiXyviKCf7iAt4hDRD6J9fszAQV8ZxpSJy1o0wCgrGtqrtz_9hLZNnf9gpEoSBABk1_Root3mZ7BA7gbSWdvFrtDxzFIadHbpPKHeBSA?testcase_id=5624318482710528 <script> var a = new window.webkitRTCPeerConnection({"iceServers":[{"url":"turns:"}]}); </script> Filer: ochang See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jul 9 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Jul 9 2016
,
Sep 16 2016
,
Sep 16 2016
,
Sep 17 2016
Your change meets the bar and is auto-approved for M54 (branch: 2840)
,
Sep 20 2016
This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible! If all merges have been completed, please remove any remaining Merge-Approved labels from this issue. Thanks for your time! To disable nags, add the Disable-Nags label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Sep 23 2016
This issue has been approved for a merge. Please merge the fix to any appropriate branches as soon as possible! If all merges have been completed, please remove any remaining Merge-Approved labels from this issue. Thanks for your time! To disable nags, add the Disable-Nags label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Oct 7 2016
Nothing to merge here.
,
Oct 10 2016
,
Oct 15 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 28
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by ClusterFuzz
, Jul 9 2016