Issue metadata
Sign in to add a comment
|
Indirect-leak in xmlBufResize |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6692732333719552 Fuzzer: libfuzzer_libxml_xml_read_memory_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Indirect-leak Crash Address: Crash State: xmlBufResize xmlBufAdd xmlStringGetNodeList Sanitizer: address (ASAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=450688:450717 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv96UzD1HSqTyEfqfF9Nx1cd7M6nNOhtPjOYaz3eGucyhA4z2Ggi_MaNTUko-J0VwM-iFgFvta6BvpEg07_EOEleQy0tZ9M0ybN4iXwQIzWMux58wKynqr4OZ-aizcUU4RHa3ectt23aNlYhKoZDxKk2XCbjQ2o6xuQ4Clw2fvhUU3mkVtsOZKr6NQDCpEFbXDcQIxM8zXda_w_WFrunj2EylftMym-6ddrkfgYBHyoEZtWphTDm6SSR5KB7oPC-GIGKGYJTnrQn8-0j2p6uYv1iyrNB3Cm5h4rwjZivv44i36zmk_oGs0JqmVU5OH1eOqBh_dEKRHYLrKp6Y-tkMnWx6_gsme4nDCFLpyQQRxs3EsxYIOGE?testcase_id=6692732333719552 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Apr 13 2017
I'm guessing the regression range is wrong and it is just pointing at this: d61bcad3017676cfbc1a53c65a51ffcef331b56e I'm going to bump the priority down on this; leaking is not as bad as UAF which is often the alternative given the complexities of libxml2 memory management.
,
Apr 14 2017
I think this is the same root cause as Issue 692817 .
,
Jun 21 2017
ClusterFuzz has detected this issue as fixed in range 480737:480767. Detailed report: https://clusterfuzz.com/testcase?key=6692732333719552 Fuzzer: libFuzzer_libxml_xml_read_memory_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Indirect-leak Crash Address: Crash State: xmlBufResize xmlBufAdd xmlStringGetNodeList Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=450688:450717 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=480737:480767 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6692732333719552 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by mummare...@chromium.org
, Mar 3 2017Components: Blink>XML
Labels: Test-Predator-Wrong M-58
Owner: dominicc@chromium.org
Status: Assigned (was: Untriaged)