New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 682627 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Out-of-memory in libxml_xml_read_memory_fuzzer

Project Member Reported by ClusterFuzz, Jan 19 2017

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5567924942405632

Fuzzer: libfuzzer_libxml_xml_read_memory_fuzzer
Job Type: libfuzzer_chrome_msan
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  libxml_xml_read_memory_fuzzer
  
Sanitizer: memory (MSAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=395689:395794

Minimized Testcase (0.10 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97j1S7MVd598RP-pzllnxpMwCFHK6I1TJxybVhMCgMN7sybZ437sXzYqYntkpJmZyME2QJUHMLtzrdtfr1MVmplbrvhs9w3Qr-pA1eqhMnCfA_hPqjZQXjLG5QWLE4WO7n5ozSyRaaVvF0o854XpKGjZyAvWel_bWm-BwicPU7xcPYriO6nfCUyYP7Qx1qXSiVsp8QWgvJDl6YKmirV22sSY9iWRmhdlgMzpApslpVorbszc0u1Y83znQLbMmEd4VK--X0DyZtT1dy50JoNcQw9LWXrifQkdPc5_BsJvNi3LnbS6Ao-Ts7tcWm2x-3M5W2c4sBriHdGM4hxxfUO98StFVonLzinBE9azAa2LveWac3LxS0?testcase_id=5567924942405632
<?h?><!DOCTYPEt[<!ENTITY % xx '&#37;xx;root' >
%validati<!ENTITY % xx '&��gggggx;root' >%xx;%TY % xx '&#xeg


Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Cc: mmoroz@chromium.org dominicc@chromium.org
Components: Blink>XML
Labels: Test-Predator-Wrong M-56

Comment 2 by mmoroz@chromium.org, Jan 20 2017

Cc: -dominicc@chromium.org
Owner: dominicc@chromium.org
Status: Assigned (was: Untriaged)
That's an interesting input!

Looks like it eats as much memory as you can give: https://paste.googleplex.com/5082311120912384
Project Member

Comment 3 by ClusterFuzz, Jun 24 2017

Status: WontFix (was: Assigned)
ClusterFuzz testcase 5567924942405632 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment