Integer-overflow in SkTAbs<int> |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5421796520361984 Fuzzer: libfuzzer_skia_pathop_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: SkTAbs<int> UseInnerWinding SkOpSegment::markAngle Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=415587:415619 Minimized Testcase (0.31 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94NnnH9KfMGPJWWfv7ADa5jMJt85DNcsTDVDh1bO4UZSbOzdCfaoTjLWTo1GHNqnRdJEy4cjVDdK76T94aHEDFC9Z-wuzhgqnuZGCru2s-cmVk6BcR7I39Xbm_9RIT6VTefazhSQ5nCjpLZBdiEU9x6P7S9pA?testcase_id=5421796520361984 Issue manually filed by: mummareddy See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Sep 1 2016
ClusterFuzz has detected this issue as fixed in range 415619:415673. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5421796520361984 Fuzzer: libfuzzer_skia_pathop_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: SkTAbs<int> UseInnerWinding SkOpSegment::markAngle Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=415587:415619 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=415619:415673 Minimized Testcase (0.31 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94NnnH9KfMGPJWWfv7ADa5jMJt85DNcsTDVDh1bO4UZSbOzdCfaoTjLWTo1GHNqnRdJEy4cjVDdK76T94aHEDFC9Z-wuzhgqnuZGCru2s-cmVk6BcR7I39Xbm_9RIT6VTefazhSQ5nCjpLZBdiEU9x6P7S9pA?testcase_id=5421796520361984 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Sep 1 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||
►
Sign in to add a comment |
|||
Comment 1 by mummare...@chromium.org
, Aug 31 2016Labels: findit-wrong M-55 Te-Logged
Owner: caryclark@chromium.org
Status: Assigned (was: Untriaged)