New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 642065 link

Starred by 1 user
Status: WontFix
Owner:
sebmarchand@chromium.org
Closed: Aug 2016
Cc:
█ miau...@gmail.com
chrisha@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: ----
Type: Bug-Security



Sign in to add a comment

Crash in base::UncheckedMalloc

Project Member Reported by ClusterFuzz, Aug 29 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5318051518218240

Fuzzer: miaubiz_svg_fuzzer
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x0057e5cf
Crash State:
  base::UncheckedMalloc
  sk_malloc_flags
  <lambda_e3b1843461c403e7d98e0573a0583bb5>::<lambda_invoker_cdecl>
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_chrome&range=414733:414742

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv96IIy_2BtW5FIGvkGoqQbEtCDD9G-CSE6hGkLFyRY8eudPSAbQ5RyBfWE97DINW0Az-Fwsq8mMWAWQsuLmerHXt85Q0boGjuJSLUNAn30dWhHFUfK74nILbTr6dQEAk8gPW6J3iynTkdi3OfZWLuuKthRPcISUpDVveYW5BCKGMIW4LG5o?testcase_id=5318051518218240


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by infe...@chromium.org, Aug 29 2016

Cc: chrisha@chromium.org
Owner: sebmarchand@chromium.org
Status: WontFix (was: Untriaged)
Looks like a bad oom that SyzyASAN didn't catch.
Project Member

Comment 2 by sheriffbot@chromium.org, Aug 30 2016

Labels: -reward-topanel reward-ineligible
Project Member

Comment 3 by sheriffbot@chromium.org, Dec 6 2016

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment