New issue
Advanced search Search tips

Issue 636039 link

Starred by 1 user
Status: Duplicate
Merged: issue 634187
Owner:
dalecur...@chromium.org
Closed: Aug 2016
Cc:
qiangchen@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Integer-overflow in media::MovingAverage::AddSample

Project Member Reported by ClusterFuzz, Aug 9 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6743100435464192

Fuzzer: ochang_search_index_mutator
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  media::MovingAverage::AddSample
  media::VideoRendererAlgorithm::UpdateFrameStatistics
  media::VideoRendererAlgorithm::RemoveExpiredFrames
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=370022:370027

Minimized Testcase (2545.51 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96ZIDbh2TNuqQ4eavfBi80qXleKK1Q2c7YwohFsZzly_OeomzLUJEfDh9OLnJW99T4tVEc8CrYR2E0NUdPo7kGeA3mj_08JpvVTgSNDuPQOAJtE_xYY-LDe58nSZyzvvZOu2xyPy0GnH7UKaAstAVak8dkC94xmnGC2xjpbBPdVYa4Lemo?testcase_id=6743100435464192

Issue manually filed by: mmohammad

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by mmohammad@chromium.org, Aug 9 2016

Cc: qiangchen@chromium.org
Owner: dalecur...@chromium.org
Status: Assigned (was: Untriaged)
suspected might be Changelist: https://chromium.googlesource.com/chromium/src//+/e9c89e91623714fe04fd20c5caaee03dcae021e5

dalecurtis@ could you please look into this. thanks

Comment 2 by dalecur...@chromium.org, Aug 9 2016

Mergedinto: 634187
Status: Duplicate (was: Assigned)
Dupe?
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment