Issue 705323 link

Starred by 2 users

Issue metadata

Status:	Duplicate
Merged:	issue 698524
Owner:	tguilbert@chromium.org
Closed:	Oct 2017
Cc:	█ rodger.c...@gmail.com █ mummare...@chromium.org █ msrchandra@chromium.org wolenetz@chromium.org
Components:	Internals>Media>FFmpeg
EstimatedDays:	----
NextAction:	----
OS:	Linux
Pri:	1
Type:	Bug
Stability-Crash Reproducible Stability-Memory-AddressSanitizer Clusterfuzz M-58 Stability-AFL Test-Predator-Wrong

Blocking:
issue 698865

Abrt in av_parser_parse2

Project Member Reported by ClusterFuzz, Mar 27 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5576994143338496

Fuzzer: afl_media_pipeline_integration_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x03e900005a8f
Crash State:
  av_parser_parse2
  parse_packet
  read_frame_internal
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=433031:433291

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv97prcn5IadiFOd5zXm0S4xtBd8hdJP3NB3EiBcYXhag6e9ERQY3zk1qLhL3pR6tzY-KXMrY-1ly4dDofmnrMgcIstXJgz-Vv_57sJ8x0E-Rk4AQjd7j_LZhuzNeJNtrOx8jXREEdpbAe_MNqdF0d12sCHs5UYiDzExjnkwaP__Y3xX6AlO2n5H-M-1wcnDMlGycC3V8lbmvN1XjPrKuBtgCAuePq0bL6D5FbdmPqRmv5osKHirSxg9Vvj4906SiwE9PIXcubJnM-7kJPDyyOzhKGrHVYWXvFwm06wma8PuAMDhscfd926YsNjF1GJvQRtMvHKEGD3lp4hqoAWi7GKok30kKutBvBlik6uVs0E1NXKffvoUoMjdQYAN0fjtd3iKLOor3eT33H_yfNLQ0tM3CG67NQg?testcase_id=5576994143338496


Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by msrchandra@chromium.org, Mar 27 2017

Cc: msrchandra@chromium.org rodger.c...@gmail.com
Labels: Test-Predator-Correct-CLs M-58

Adding the concern owner in Cc from Predator results --

The result is a list of CLs that change the crashed files. 

Author: Rodger Combs
Project: chromium-ffmpeg
Changelist: https://chromium.googlesource.com/chromium/third_party/ffmpeg.git/+/d13740f3a207668f53ce167cf96f353379ac2c14
Time: Tue Sep 20 10:57:39 2016
Lines 185-189 of file parser.c which potentially caused crash are changed in this cl (frame #1, "av_parser_parse2").
Minimum distance from crash line to modified line: 0. (file: parser.c, crashed on: 185, modified: 185).

@Rodger -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by rodger.c...@gmail.com, Mar 27 2017

I can't access the test case, but this looks more like a hit on the av_assert0() line immediately above my change, which would result in an abort. I can't speculate on which code would be doing that, since I don't know which parser it's in.

Comment 3 by mummare...@chromium.org, Mar 28 2017

Cc: mummare...@chromium.org wolenetz@chromium.org
Components: Internals>Media>FFmpeg
Labels: -Test-Predator-Correct-CLs Test-Predator-Wrong
Owner: tguilbert@chromium.org
Status: Assigned (was: Untriaged)

Looks like dupe of  issue 698524 . tguilbert@, could you please take a look and duplicate it.
Thank you.

Comment 4 by tguilbert@chromium.org, Mar 30 2017

Blocking: 698865

Comment 5 by tguilbert@chromium.org, Oct 23 2017

Mergedinto: 698524
Status: Duplicate (was: Assigned)

This was indeed a dupe.

►

Issue 705323 link

Issue metadata

Abrt in av_parser_parse2

Issue description

Comment 1 by msrchandra@chromium.org, Mar 27 2017

Comment 1 Deleted

Comment 2 by rodger.c...@gmail.com, Mar 27 2017

Comment 2 Deleted

Comment 3 by mummare...@chromium.org, Mar 28 2017

Comment 3 Deleted

Comment 4 by tguilbert@chromium.org, Mar 30 2017

Comment 4 Deleted

Comment 5 by tguilbert@chromium.org, Oct 23 2017

Comment 5 Deleted

Sign in to add a comment