New issue
Advanced search Search tips

Issue 686085 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 628222
Owner:
Closed: Mar 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Crash in sk_sp<SkSpecialImage_Raster> sk_make_sp<SkSpecialImage_Raster, SkIRect const&, S

Project Member Reported by ClusterFuzz, Jan 27 2017

Issue description

Components: Internals>Skia
Labels: Test-Predator-Wrong M-58

Comment 2 by hcm@chromium.org, Mar 6 2017

Owner: hcm@google.com

Comment 3 by hcm@chromium.org, Mar 6 2017

Owner: mummare...@chromium.org
I've tried multiple things and cannot see the report here to triage (?)  Ideas?

Comment 4 by hcm@chromium.org, Mar 6 2017

nevermind, just got it w/ my chromium

Comment 5 by hcm@chromium.org, Mar 6 2017

Owner: ----

Comment 6 by hcm@chromium.org, Mar 6 2017

Owner: robertphillips@chromium.org
To Robert for a look...

Comment 7 by hcm@chromium.org, Mar 6 2017

Status: Assigned (was: Untriaged)
Mergedinto: 628222
Status: Duplicate (was: Assigned)
Project Member

Comment 9 by ClusterFuzz, Apr 15 2017

ClusterFuzz has detected this issue as fixed in range 464815:464837.

Detailed report: https://clusterfuzz.com/testcase?key=5087097448038400

Fuzzer: sugoi_filter_fuzzer
Job Type: linux_asan_filter_fuzz_stub_32bit
Platform Id: linux

Crash Type: UNKNOWN WRITE
Crash Address: 0x00000004
Crash State:
  sk_sp<SkSpecialImage_Raster> sk_make_sp<SkSpecialImage_Raster, SkIRect const&, S
  SkSpecialImage::MakeFromRaster
  SkDisplacementMapEffect::onFilterImage
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_filter_fuzz_stub_32bit&range=391407:391453
Fixed: https://clusterfuzz.com/revisions?job=linux_asan_filter_fuzz_stub_32bit&range=464815:464837

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96l6f7NxLbbYGkF36jCHdnFGDptb2abU4bzjPAAtyHH0PB2iSJteJV8lcAKkylXgmu1IdoN3DhN0AzzBByy1jaEDCrB1cqOcZ9NjGmRJCntmSsIAZaSLkJFmej22mYeJDZcJL3u5qfo5Bn6IntN8B7rogmNyi6jM-cuseCrT9Pv-vCBl7RZiP5FyGUxk3Zw41NTnCMfnQUEVGzUXBwB3Xm8glUcrJAITVqOdQ1sO0OOXKFPQ4DzuWhifXxcobkUU8q5896WbOED74yqTLI-Xt-DiLy7S78ynsEUALLlHed4_epPEjZF-nSupFbV2mKZ0VQ3zCfzlF_hi6OfytUWjsOFg9Bqm6erhRhpP4cXtUbkUZjw1WQ?testcase_id=5087097448038400


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Sign in to add a comment