Issue metadata
Sign in to add a comment
|
Use-of-uninitialized-value in SkPath::operator= |
||||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4817967658565632 Fuzzer: ifratric_pdf_generic Job Type: linux_msan_pdfium Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkPath::operator= SkiaState::ClipSave CFX_SkiaDeviceDriver::RestoreState Sanitizer: memory (MSAN) Recommended Security Severity: Low Regressed: https://clusterfuzz.com/revisions?job=linux_msan_pdfium&range=459789:459833 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96OSqPBKOT-Fi2lvtYQRyqqrSN65bfWwsb2fMGwvf41cohEA1X6yh3iY5LrXKVtlD2lOR_PtnKEbNMKFlPHxR6om_p7SS12uRkHhCEI-ufn2zV0kU9A1m7S9HMt7ZtGeb-KNED0JJODx-kxn3U8AIwz-nEwXG66n4hk8uKp1WpXEj4yJsRApJE8YlHAft2w3L2U7TDz8f8DbDuB6df3Xq_J06GWAJInrQgKZZ6GWkaADL-RWoI5kjTFg9UvA5xJS2ONG1deQDQkDxvdpmyIhSzWc51Cz_yRi5oKCysxwxK-QhU2gXCP9q_NKD9_olW-jPnnJeIXc2O-FrhEuUUyws68483meEDy9UD9QiXNkyMd8tB5mbyQY6wGoMg2yiNu949KXnu7e2OPNuUkQusIvg6mx3OKVQ?testcase_id=4817967658565632 Additional requirements: Requires Gestures Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Mar 29 2017
caryclark@, I wonder if you can take a look at this bug. Your recent change seems related. https://cs.chromium.org/chromium/src/third_party/pdfium/core/fxge/skia/fx_skia_device.cpp?sq=package:chromium&type=cs&l=1378 from https://pdfium.googlesource.com/pdfium.git/+/f4a9f83b38a0a45cda3205ad50747e6a7719f8ab%5E%21/#F0
,
Mar 29 2017
ClusterFuzz has detected this issue as fixed in range 460139:460163. Detailed report: https://clusterfuzz.com/testcase?key=4817967658565632 Fuzzer: ifratric_pdf_generic Job Type: linux_msan_pdfium Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkPath::operator= SkiaState::ClipSave CFX_SkiaDeviceDriver::RestoreState Sanitizer: memory (MSAN) Recommended Security Severity: Low Regressed: https://clusterfuzz.com/revisions?job=linux_msan_pdfium&range=459789:459833 Fixed: https://clusterfuzz.com/revisions?job=linux_msan_pdfium&range=460139:460163 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96OSqPBKOT-Fi2lvtYQRyqqrSN65bfWwsb2fMGwvf41cohEA1X6yh3iY5LrXKVtlD2lOR_PtnKEbNMKFlPHxR6om_p7SS12uRkHhCEI-ufn2zV0kU9A1m7S9HMt7ZtGeb-KNED0JJODx-kxn3U8AIwz-nEwXG66n4hk8uKp1WpXEj4yJsRApJE8YlHAft2w3L2U7TDz8f8DbDuB6df3Xq_J06GWAJInrQgKZZ6GWkaADL-RWoI5kjTFg9UvA5xJS2ONG1deQDQkDxvdpmyIhSzWc51Cz_yRi5oKCysxwxK-QhU2gXCP9q_NKD9_olW-jPnnJeIXc2O-FrhEuUUyws68483meEDy9UD9QiXNkyMd8tB5mbyQY6wGoMg2yiNu949KXnu7e2OPNuUkQusIvg6mx3OKVQ?testcase_id=4817967658565632 Additional requirements: Requires Gestures See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 29 2017
ClusterFuzz testcase 4817967658565632 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Mar 29 2017
,
Mar 29 2017
,
Apr 10 2017
,
Apr 12 2017
,
Apr 12 2017
fixed in https://pdfium-review.googlesource.com/c/4090/ (mistyped bug # in CL)
,
Apr 17 2017
,
Jul 24 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Sep 18 2017
We have made a bunch of changes on ClusterFuzz side, so resetting ClusterFuzz-Wrong label. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by sheriffbot@chromium.org
, Mar 28 2017