New issue
Advanced search Search tips

Issue 628360 link

Starred by 1 user
Status: WontFix
Owner:
och...@chromium.org
Closed: Dec 2016
Cc:
dsinclair@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Floating-point-exception in opj_pi_next

Project Member Reported by ClusterFuzz, Jul 14 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4541078808297472

Fuzzer: afl_pdf_jpx_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: Floating-point-exception
Crash Address: 
Crash State:
  opj_pi_next
  opj_t2_decode_packets
  opj_tcd_decode_tile
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv945fIUb-Sx86_3abze7OuVWQGc-Ea7Ru__zxPaEkwN_l4uDM7KPgSrcasPSqN5qoUrSKc76kNYuxLlcG848d23AzIAHlY6G69LWlex2B3-l8BTaFCabfxQKXvUU1XVkw3J6dB-SyTjzhx-rotgUy6yNOktUaw?testcase_id=4541078808297472


Filer: mmohammad

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Project Member

Comment 1 by ClusterFuzz, Jul 15 2016 

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6177679485435904

Fuzzer: afl_pdf_jpx_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: Floating-point-exception
Crash Address: 
Crash State:
  opj_pi_next
  opj_t2_decode_packets
  opj_tcd_decode_tile
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94qIOtWZdCXh2zDENxwhINW3kjAmzLkxuhLEnhh_3hVoJZlc7C_QePDf1bDLf2NvRm8LIA3so961HPcFx0W0HbVTzChawD8ATQSjc34OPkMxj1vpHbKSQIc110OhBtCuTgiXjT8JGbtpiNmLFSeDgN0bxiz4Q?testcase_id=6177679485435904


Additional requirements: Requires Gestures

Filer: mmohammad

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 2 by thestig@chromium.org, Jul 16 2016

Cc: och...@chromium.org dsinclair@chromium.org
Components: Internals>Plugins>PDF
Just a FPE, whew.

Comment 3 by mmoroz@chromium.org, Jul 21 2016

Labels: -ClusterFuzz -Stability-Libfuzzer Clusterfuzz

Comment 4 by metzman@google.com, Jul 26 2016 

This crash keeps getting hit by the afl fuzzer so there might be more interesting bugs to follow once this is fixed.

Comment 5 by och...@chromium.org, Jul 27 2016

Cc: -och...@chromium.org
Owner: och...@chromium.org
Status: Assigned (was: Available)
Looks like I'll have to take this.
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 7 by ClusterFuzz, Dec 22 2016

Status: WontFix (was: Assigned)
ClusterFuzz testcase 4541078808297472 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
►

Sign in to add a comment