New issue
Advanced search Search tips

Issue 643005 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 610988
Owner: ----
Closed: Sep 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: ----
Type: Bug-Security



Sign in to add a comment

Heap-use-after-free in test_runner::TestRunnerForSpecificView::Reset

Project Member Reported by ClusterFuzz, Sep 1 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5559774148296704

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: Heap-use-after-free READ 8
Crash Address: 0x617000266480
Crash State:
  test_runner::TestRunnerForSpecificView::Reset
  test_runner::TestInterfaces::ResetTestHelperControllers
  test_runner::TestInterfaces::ResetAll
  
Recommended Security Severity: High

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=389884:390115

Minimized Testcase (1.16 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94pfzioNsM1mBTIZe8DLYijSqwPfRJA1_Dpw46pz2_-iH35iDGHEulYik-DtlSwvQvHknCn0czyt1_EQ7IL9WOE5K3LEs9WlbHMPlf6n8mfRZz6YgeU2xeQDRnJ696wI06KXbS-wkjGCY9b_E3Ld1BwYXYbDg?testcase_id=5559774148296704

Issue manually filed by: tanin

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 

Comment 1 by ta...@google.com, Sep 1 2016

It looks similar to #610988.
Mergedinto: 610988
Status: Duplicate (was: Untriaged)
Yes and test only.
Project Member

Comment 3 by sheriffbot@chromium.org, Mar 3 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment