Issue metadata
Sign in to add a comment
|
Stack-buffer-overflow in SfxEntry::checkword |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5767233576108032 Fuzzer: libfuzzer_hunspell_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Stack-buffer-overflow WRITE {*} Crash Address: 0x7fe979910124 Crash State: SfxEntry::checkword AffixMgr::suffix_check SuggestMgr::checkword Recommended Security Severity: High Minimized Testcase (0.09 Kb): https://cluster-fuzz.appspot.com/download/AMIfv976gZSsWK-14aMn_Z-RMKN8OACYCIYZLZnTD1HArRj6H5pcLf_sSLbfAmNZ_s92MxCnadWMORRWAJ_OvRDr-uvn9JpRGmu1_MUOgIZljfhNv1LoUB5zR4-7IIO3pIPdL75OhyNdPST1esAxvKQ4sdgE-vcH6g?testcase_id=5767233576108032 Issue manually filed by: mmoroz See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Aug 17 2016
,
Aug 17 2016
,
Aug 18 2016
,
Aug 18 2016
This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Aug 27 2016
ClusterFuzz has detected this issue as fixed in range 414871:414881. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5767233576108032 Fuzzer: libfuzzer_hunspell_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Stack-buffer-overflow WRITE {*} Crash Address: 0x7fe979910124 Crash State: SfxEntry::checkword AffixMgr::suffix_check SuggestMgr::checkword Recommended Security Severity: High Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=414871:414881 Minimized Testcase (0.09 Kb): https://cluster-fuzz.appspot.com/download/AMIfv976gZSsWK-14aMn_Z-RMKN8OACYCIYZLZnTD1HArRj6H5pcLf_sSLbfAmNZ_s92MxCnadWMORRWAJ_OvRDr-uvn9JpRGmu1_MUOgIZljfhNv1LoUB5zR4-7IIO3pIPdL75OhyNdPST1esAxvKQ4sdgE-vcH6g?testcase_id=5767233576108032 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Aug 27 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Aug 28 2016
,
Dec 3 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Apr 27 2017
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by mmoroz@chromium.org
, Aug 17 2016Components: UI>Browser>Spellcheck
Labels: Pri-1
Owner: groby@chromium.org