Issue metadata
Sign in to add a comment
|
Heap-buffer-overflow in FPDFAPI_inflate |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4783753832693760 Fuzzer: libfuzzer_pdf_codec_tiff_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60a00000077c Crash State: FPDFAPI_inflate PixarLogDecode TIFFReadEncodedTile Recommended Security Severity: High Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=400757:400887 Minimized Testcase (1.07 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94-X-iVhSSqbY-9gkq1gIYjyg96SZxIqjaYPkNjRYlo3DoFTNV_noo-l1Voc-Bk79D97OXQpxaKvcnLEE9xdNE5t_3je0hE0LZROLh8lF8YVMAFmzX-ldcvC_4eovUrR7JeGIGLZVEC6Tdk5QkZGHCVj9Mb3w?testcase_id=4783753832693760 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Oct 22 2016
,
Oct 24 2016
dsinclair: Would you mind taking a look at this when you have time? It doesn't look urgent since it's XFA.
,
Oct 25 2016
@mbarbella, I guess you can merge it to @624515? https://bugs.chromium.org/p/chromium/issues/detail?id=624515
,
Oct 28 2016
ClusterFuzz has detected this issue as fixed in range 427848:428120. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4783753832693760 Fuzzer: libfuzzer_pdf_codec_tiff_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash Address: 0x60a00000077c Crash State: FPDFAPI_inflate PixarLogDecode TIFFReadEncodedTile Recommended Security Severity: High Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=400757:400887 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=427848:428120 Minimized Testcase (1.07 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94-X-iVhSSqbY-9gkq1gIYjyg96SZxIqjaYPkNjRYlo3DoFTNV_noo-l1Voc-Bk79D97OXQpxaKvcnLEE9xdNE5t_3je0hE0LZROLh8lF8YVMAFmzX-ldcvC_4eovUrR7JeGIGLZVEC6Tdk5QkZGHCVj9Mb3w?testcase_id=4783753832693760 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 28 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 28 2016
,
Feb 3 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
May 15 2017
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by sheriffbot@chromium.org
, Oct 22 2016