pbos@, could you please help to find an owner?

Please note that this has been found using Debug build.

sergeyu@ do I recall correctly that you guys kind of own PseudoTcp?

It appears that the fuzzer was running cricket::PseudoTcp on a thread that didn't have rtc::Thread object, which normally should never be happening, so I don't think we need to do anything about it.

Should be a bug in the fuzzer then, phoglund@ can you see if someone can pick this up?

Re #3: Ok, any idea why it only happens sometimes?

https://codereview.webrtc.org/2365373002/ should make a thread object exist for the lifetime of the fuzzer. Sergey, that what you meant?

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Fixed by https://codereview.webrtc.org/2365373002/.

ClusterFuzz has detected this issue as fixed in range 455091:455226.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4585121049214976

Fuzzer: libfuzzer_pseudotcp_parser_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  rtc::StreamInterface::PostEvent
  rtc::FifoBuffer::ConsumeWriteBuffer
  cricket::PseudoTcp::process
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=419151:419211
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=455091:455226

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95VAU1odGpDlEU50Y7i1uewSYd-UuaGlw_Dp41Mr3GR--w-0KwATbCUQrZizzOR_VHSwTWYQsSr4wDjVB2cMdAZ0bSFB1XUPDKoUmZuG4Kvis64_k7G8SL4Bi2ucoyLyAMFM7F7WDkrffl82zME0ZgunYCyzIsoSax15ldwo974Etw8eI-SIcmWOkRRwvfUoj3CP9tLmvCEuaxJAjuyNwJWsaipCqQ4Vw4JDwfUYfqALFTVgSkvcnbU21uiYiBvtovgjnBZ7Au5PPbHyR97KDEABlayPDmTbtlW42vqrAtmylT2bSgbRHR_1nrSzvQV5TeBKjdTkQcKtsUrNpRaNM2v6NCS44LTcwwhgX_qljU1uHfq3rY?testcase_id=4585121049214976


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.