New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 677477 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Jan 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Timeout in pdf_codec_jpeg_fuzzer

Project Member Reported by ClusterFuzz, Dec 29 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6681210115063808

Fuzzer: libfuzzer_pdf_codec_jpeg_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Timeout
Crash Address: 
Crash State:
  pdf_codec_jpeg_fuzzer
  

Minimized Testcase (0.15 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94rEfambUbRCmnyj2ZNtyiJwceu1kYmLh6BvHGTqEdKCsawOcXUBlu-lFaeojo8GynzqjN78TpznqLTojIaZm45wR76gNZqB37AJMJJkEjOj6gVH52kg8_Kb2c-rqlkexOcEMAtfkN7Bn1xWWj8_HjlTSXSaQ?testcase_id=6681210115063808

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Cc: msrchandra@chromium.org thestig@chromium.org
Components: Internals>Plugins>PDF
Labels: M-56 Test-Predator-Correct-CLs
Owner: dsinclair@chromium.org
Status: Assigned (was: Untriaged)
Assigning to the concern owner from Find it results --
Regression information is not available. The result is the blame information. 

Author: Dan Sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/764ec513eecbebd12781bcc96ce81ed5e736ee92
Time: Mon Mar 14 13:35:12 2016 -0400
The CL last changed line 1590 of file fx_codec_icc.cpp, which is stack frame 5. 

Author: Dan Sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/764ec513eecbebd12781bcc96ce81ed5e736ee92
Time: Mon Mar 14 13:35:12 2016 -0400
The CL last changed line 1655 of file fx_codec_progress.cpp, which is stack frame 6. 

Author: Dan Sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/764ec513eecbebd12781bcc96ce81ed5e736ee92
Time: Mon Mar 14 13:35:12 2016 -0400
The CL last changed line 1821 of file fx_codec_progress.cpp, which is stack frame 7. 

Author: Dan Sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/764ec513eecbebd12781bcc96ce81ed5e736ee92
Time: Mon Mar 14 13:35:12 2016 -0400
The CL last changed line 2111 of file fx_codec_progress.cpp, which is stack frame 8. 

Author: dsinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/5a5f251ce8646ec421aa9e35d8bbca71a984770a
Time: Mon Jun 06 11:52:30 2016 -0700
The CL last changed line 36 of file xfa_codec_fuzzer.h, which is stack frame 9. 

Author: dsinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/5a5f251ce8646ec421aa9e35d8bbca71a984770a
Time: Mon Jun 06 11:52:30 2016 -0700
The CL last changed line 8 of file pdf_codec_jpeg_fuzzer.cc, which is stack frame 10.

@dsinclair -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.
Owner: npm@chromium.org
npm@ has been looking into timeouts from the fuzzers.

Comment 3 by npm@chromium.org, Jan 26 2017

Status: WontFix (was: Assigned)
Verified that it is just slow decoding the image, not in a loop.
Project Member

Comment 4 by ClusterFuzz, Feb 2 2017

ClusterFuzz has detected this issue as fixed in range 447516:447622.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6681210115063808

Fuzzer: libfuzzer_pdf_codec_jpeg_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Timeout (exceeds 25 secs)
Crash Address: 
Crash State:
  pdf_codec_jpeg_fuzzer
  
Sanitizer: address (ASAN)

Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan_debug&range=447516:447622

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94-8SFmlAxs47ZmnU6GletVf9bqDDjfu6GISrwAkZYrOP6UDSd2VpXi8KkQkFaZ0lqPvBg6GT6q7HUXXmunJnp198CHckAs_lQpWoYUgM_9oOfJp63Yh62a1mj0ZToosBjANiTsx1349CeT1fzJCKZmG5IX3qWOXnCIw8p0VigakzhTjC02gcWHQc2IVHDjDEOCWZaNNFxnSvj0sR-bxLoLHOjOOxgamXhDXNnnRWoNo-SJ4m9pr0NqZSdIl1_5xTPRuVGyPkCdGGXiD8p3v_ueZfvpcHIwDw8GPdJJkt2A8TFbEhm5sQUTQ3lYBL2WFjOxpAHYxOftqalZeTlSeSWLhkaAtAdQjg9qDrUyooQQLmXksJ4?testcase_id=6681210115063808


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Sign in to add a comment