New issue
Advanced search Search tips

Issue 660380 link

Starred by 1 user
Status: Duplicate
Merged: issue 699982
Owner:
dsinclair@chromium.org
Closed: Mar 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

span->len > 0

Project Member Reported by ClusterFuzz, Oct 28 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5561719213785088

Fuzzer: libfuzzer_pdfium_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  span->len > 0
  void CFX_Renderer::render<agg::scanline_u<unsigned char> >
  void agg::render_scanlines<agg::rasterizer_scanline_aa, agg::scanline_u<unsigned
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=395717:395804

Minimized Testcase (8.16 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97GK0UGKipYTMR9qHjwTn4ZSsWtZobZc_NOPL9RRw4FSFSWhH7JWGNGAkmG2faGKdsQ-EpZYfOJkuGTlz1YYUBAIDM_QYcH9NwNO25ttwo-HC86Ow34i2VV51FQ_t7oHdlOETZSbEyqJs2TUJgQU6PgMeVCAw?testcase_id=5561719213785088

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by mmohammad@chromium.org, Oct 28 2016

Owner: dsinclair@chromium.org
Status: Assigned (was: Untriaged)
dsinclair@ could you please look into this.please feel free to re-assigned back if needed. thanks in advance !

Comment 2 by dsinclair@chromium.org, Oct 31 2016

Components: Internals>Plugins>PDF
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 4 by ClusterFuzz, Mar 8 2017 

ClusterFuzz has detected this issue as fixed in range 455091:455226.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5561719213785088

Fuzzer: libfuzzer_pdfium_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  span->len > 0
  void CFX_Renderer::render<agg::scanline_u<unsigned char> >
  void agg::render_scanlines<agg::rasterizer_scanline_aa, agg::scanline_u<unsigned
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=395717:395804
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=455091:455226

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94OJxf6FgZhzPIi7d_c2dTeceu18bIpeqnm-RH6BbuTfy-mjfJzUpG7bllY7CSYGOeNEtihXSFoiHGYEtPstM7c-aktXXSOAWC2ZUG_HJY8JPtY2Y0JALu7BnXFzwa7Sh8I6lA-XM3swUyFGP2jBgd6_MLkP4CfggfVkFYqHIBVSuNuZWvZ2KgbhXu-xvYE6Rkrq9Ic3I6HuA498zNTbdHH7CUPqFmFbui8QdbdhAHx59gMIMsnl_tXbF_AN5_rrifPWbYfN9gRalDP0HiurBjDmZk2E1VMPCBTbn9T1hOsQvCL-0cDGo7yfVHwDDafWPiEhm-5LjBzyVSB-dZkAe5Pp3sel1-6ykaCVdFqNP53stC-IAc?testcase_id=5561719213785088


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Mar 8 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5561719213785088 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Comment 6 by npm@chromium.org, Mar 10 2017

Labels: ClusterFuzz-Wrong
Mergedinto: 699982
Status: Duplicate (was: Verified)

Comment 7 by ta...@google.com, Mar 10 2017

Labels: -ClusterFuzz-Verified
Project Member

Comment 8 by ClusterFuzz, Mar 10 2017 

ClusterFuzz has detected this issue as fixed in range 455091:455226.

Detailed report: https://clusterfuzz.com/testcase?key=5561719213785088

Fuzzer: libfuzzer_pdfium_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  span->len > 0
  void CFX_Renderer::render<agg::scanline_u<unsigned char> >
  void agg::render_scanlines<agg::rasterizer_scanline_aa, agg::scanline_u<unsigned
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=395717:395804
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=455091:455226

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv94OJxf6FgZhzPIi7d_c2dTeceu18bIpeqnm-RH6BbuTfy-mjfJzUpG7bllY7CSYGOeNEtihXSFoiHGYEtPstM7c-aktXXSOAWC2ZUG_HJY8JPtY2Y0JALu7BnXFzwa7Sh8I6lA-XM3swUyFGP2jBgd6_MLkP4CfggfVkFYqHIBVSuNuZWvZ2KgbhXu-xvYE6Rkrq9Ic3I6HuA498zNTbdHH7CUPqFmFbui8QdbdhAHx59gMIMsnl_tXbF_AN5_rrifPWbYfN9gRalDP0HiurBjDmZk2E1VMPCBTbn9T1hOsQvCL-0cDGo7yfVHwDDafWPiEhm-5LjBzyVSB-dZkAe5Pp3sel1-6ykaCVdFqNP53stC-IAc?testcase_id=5561719213785088


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Comment 9 by infe...@chromium.org, Sep 18 2017

Labels: -ClusterFuzz-Wrong
We have made a bunch of changes on ClusterFuzz side, so resetting ClusterFuzz-Wrong label.
►

Sign in to add a comment