Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6525505131249664 Fuzzer: afl_libpng_progressive_read_fuzzer Job Type: afl_chrome_asan Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x03e900004a1d Crash State: png_default_error cr_png_error cr_png_check_IHDR Sanitizer: address (ASAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=afl_chrome_asan&range=454867:454948 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95ds5fdgxOVG4RZLdOS4Gf2dqujAP4vcyYEj2nXyJVFIt6EZA1TnRjpdZki-LIq3KAMlWXEy4XpzHhsovIEbg4KXKteq4Qae5ZSW5vE88vqMWQw_EEWi-Cod0C4GPocUsASK-zbJkcdBrJgu-JpPSnTQ5fx2sIQKHvFn3bUMgv9qNzNNpe7JIs3WjeZQl7Jgb0VHMqdkw6mws_9Lib9twS8mqSlJzaI8CaCvxdLK-VymYQ7Q11ASAOS6vlScN9De-RsNXAn56Y4exspqODUB-V0kI7sR3nooCVV08dNa6tAPeLT4OYQBabJV6pf1wPJutFgVABNnZkA_yZufPK1GFzfMQ5ptXsUyB9eTwIuJc8NtIFTC4M?testcase_id=6525505131249664 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
From regression range, suspected CL could be https://chromium.googlesource.com/chromium/src/+/11a3425fff09d249101f8fb0dcd9c00ddb80283b scroggo@, could you please take a look? Thank you
There is a similar issue 699011 reported. please duplicate if both are same.
Issue 699011 has been merged into this issue.
Looks like a bug in the fuzzer itself. We need to call setjmp() before png_process_data().
ClusterFuzz testcase 6696539117584384 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/8b4c02404b545e114bcf1ed9af2793b033e21cee commit 8b4c02404b545e114bcf1ed9af2793b033e21cee Author: msarett <msarett@google.com> Date: Thu Mar 09 13:14:23 2017 Add setjmp() to progressive png fuzzer BUG= 698971 Review-Url: https://codereview.chromium.org/2740653002 Cr-Commit-Position: refs/heads/master@{#455724} [modify] https://crrev.com/8b4c02404b545e114bcf1ed9af2793b033e21cee/testing/libfuzzer/fuzzers/libpng_read_fuzzer.cc
ClusterFuzz has detected this issue as fixed in range 455723:455742. Detailed report: https://clusterfuzz.com/testcase?key=6525505131249664 Fuzzer: afl_libpng_progressive_read_fuzzer Job Type: afl_chrome_asan Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x03e900004a1d Crash State: png_default_error cr_png_error cr_png_check_IHDR Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=454867:454948 Fixed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=455723:455742 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv95ds5fdgxOVG4RZLdOS4Gf2dqujAP4vcyYEj2nXyJVFIt6EZA1TnRjpdZki-LIq3KAMlWXEy4XpzHhsovIEbg4KXKteq4Qae5ZSW5vE88vqMWQw_EEWi-Cod0C4GPocUsASK-zbJkcdBrJgu-JpPSnTQ5fx2sIQKHvFn3bUMgv9qNzNNpe7JIs3WjeZQl7Jgb0VHMqdkw6mws_9Lib9twS8mqSlJzaI8CaCvxdLK-VymYQ7Q11ASAOS6vlScN9De-RsNXAn56Y4exspqODUB-V0kI7sR3nooCVV08dNa6tAPeLT4OYQBabJV6pf1wPJutFgVABNnZkA_yZufPK1GFzfMQ5ptXsUyB9eTwIuJc8NtIFTC4M?testcase_id=6525505131249664 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Comment 1 by mummare...@chromium.org
, Mar 7 2017Labels: Test-Predator-Wrong M-58
Owner: scroggo@chromium.org
Status: Assigned (was: Untriaged)