New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 637966 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 572802
Owner:
Closed: Aug 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Crash in printing::GetPlugin

Project Member Reported by ClusterFuzz, Aug 15 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5860232435859456

Fuzzer: inferno_layout_test_unmodified
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000003
Crash State:
  printing::GetPlugin
  printing::PrintingNodeOrPdfFrame
  printing::PrintWebViewHelper::PrintPreviewContext::IsModifiable
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_chrome&range=411953:411957

Minimized Testcase (0.49 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97W-QRHThfVh0mZec7V8JjPLC5-FwHi6Ic7mQhYQtLy6fa73b9WyzFor-mut2q4qDBWgCxJmMC3A5eWbubRtqvj6yxff0mrtgce9jdIY0pK7VVYrR5lvcryZelZKMLYUmZzJQuO11RKS9Y-QUaUnSnrKTnOYQ?testcase_id=5860232435859456
   This line should have a green background.
 print("Caught: " + e); <script>
function isParentFrame() {
}
        var iframe = document.createElement('iframe');
        iframe.src = window.location;
        document.body.appendChild(iframe);
    
   try {
if (fork()) {
}
} catch(e) { print(); }
  </script>
  <form action="resources/char-encoding-in-hidden-charset-field.php" id="testForm">
  <script>
var __v_159 = document.getElementById("testForm");
__v_159.submit();

  </script>


Issue manually filed by: mummareddy

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Components: Internals>Printing
Labels: M-54 findit-wrong Te-Logged
Owner: tzik@chromium.org
Status: Assigned (was: Untriaged)

Author: tzik
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/99de02ba952b0a69291f81c5b8ca14d81cc1f74f
Time: Fri Jul 01 05:54:12 2016
The CL last changed line 214 of file bind_internal.h, which is stack frame 4.

Author: tzik
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/99de02ba952b0a69291f81c5b8ca14d81cc1f74f
Time: Fri Jul 01 05:54:12 2016
The CL last changed line 303 of file bind_internal.h, which is stack frame 5.

Mergedinto: 572802
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment