Issue metadata
Sign in to add a comment
|
Heap-use-after-free in content::WebContents::FromRenderFrameHost |
||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5018805715861504 Fuzzer: inferno_flicker Job Type: linux_asan_chrome_chromeos Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x6190002a03b8 Crash State: content::WebContents::FromRenderFrameHost CastRemotingConnector::FrameRemoterFactory::Create media::mojom::RemoterFactoryStubDispatch::Accept Recommended Security Severity: High Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_chromeos&range=425583:425584 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv96pfxIq_mLNWrF0Auuw6gzcYwh-jxeglWnRMnRUgj4_2eWIeL7MraH5cnR_KQ6qxWM90TbmeHwhoGoloKWUfxvz_4Th3Ot9dcIHbttECWiMA98e_xU_jvVzQtLIfmQgkr5BLdqshZsbu6v8iRWzkzlG80XNzhEWrxugvX2PDJyw2wCjAlE?testcase_id=5018805715861504 Additional requirements: Requires Gestures Additional requirements: Requires HTTP Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Oct 20 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 20 2016
,
Jan 26 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 28
|
|||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||
Comment 1 by ClusterFuzz
, Oct 20 2016