New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 698330 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 692817
Owner:
Last visit > 30 days ago
Closed: Apr 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

Indirect-leak in xmlBufResize

Project Member Reported by ClusterFuzz, Mar 3 2017

Issue description

Cc: mmoroz@chromium.org kcc@chromium.org ddkil...@apple.com aizatsky@chromium.org
Components: Blink>XML
Labels: Test-Predator-Wrong M-58
Owner: dominicc@chromium.org
Status: Assigned (was: Untriaged)
dominicc@, could you please take a look and help us to find right owner?
Thank you.
Labels: -Pri-1 Pri-3
I'm guessing the regression range is wrong and it is just pointing at this:

d61bcad3017676cfbc1a53c65a51ffcef331b56e

I'm going to bump the priority down on this; leaking is not as bad as UAF which is often the alternative given the complexities of libxml2 memory management.
Mergedinto: 692817
Status: Duplicate (was: Assigned)
I think this is the same root cause as  Issue 692817 .
Project Member

Comment 4 by ClusterFuzz, Jun 21 2017

ClusterFuzz has detected this issue as fixed in range 480737:480767.

Detailed report: https://clusterfuzz.com/testcase?key=6692732333719552

Fuzzer: libFuzzer_libxml_xml_read_memory_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Indirect-leak
Crash Address: 
Crash State:
  xmlBufResize
  xmlBufAdd
  xmlStringGetNodeList
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=450688:450717
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=480737:480767

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6692732333719552


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Sign in to add a comment