Issue metadata
Sign in to add a comment
|
Crash in WriteUnalignedValue<short> |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5194241699741696 Fuzzer: v8_wasm_code_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000000007f Crash State: WriteUnalignedValue<short> WriteLittleEndianValue<short> v8::internal::wasm::ThreadImpl::Execute Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=417985:418093 Minimized Testcase (0.12 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97G61wBZLf65gEseOMsCDnqTJkvJWbenlpPvijOJQ-sgprUZvv_RE6osGTaU7RLbD-Hhyzn4JGV57qJshb-oANhqRwqxIVedlTm-FSbGNvcebWWYia7WnQz08fNgXarJlDVg2rPCWobzSrzcsOAPd9OkImlJA?testcase_id=5194241699741696 Issue manually filed by: tkonchada See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Sep 13 2016
Hello Andreas, Assigning 2 bugs to you, Read/WriteUnalignedValue() crashes in v8 wasm. One marked security by clusterfuzz. Similar bug: https://bugs.chromium.org/p/chromium/issues/detail?id=646258
,
Sep 14 2016
Hello Penny, Both bugs are related and fixed with the same CL.
,
Sep 15 2016
ClusterFuzz has detected this issue as fixed in range 418535:418598. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5194241699741696 Fuzzer: v8_wasm_code_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000000007f Crash State: WriteUnalignedValue<short> WriteLittleEndianValue<short> v8::internal::wasm::ThreadImpl::Execute Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=417985:418093 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=418535:418598 Minimized Testcase (0.12 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97G61wBZLf65gEseOMsCDnqTJkvJWbenlpPvijOJQ-sgprUZvv_RE6osGTaU7RLbD-Hhyzn4JGV57qJshb-oANhqRwqxIVedlTm-FSbGNvcebWWYia7WnQz08fNgXarJlDVg2rPCWobzSrzcsOAPd9OkImlJA?testcase_id=5194241699741696 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by tkonch...@chromium.org
, Sep 13 2016