Issue metadata
Sign in to add a comment
|
Use-of-uninitialized-value in CFGAS_TextStream::InitStream |
||||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6090451762544640 Fuzzer: libfuzzer_pdfium_xfa_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CFGAS_TextStream::InitStream CFX_RetainPtr<CFGAS_TextStream> pdfium::MakeRetain<CFGAS_TextStream, std::__1::u IFGAS_Stream::CreateReadStream Sanitizer: memory (MSAN) Recommended Security Severity: Medium Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_msan&range=465141:465158 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv94027vPA3JK27PF1l06AltXLXFwOHkv4m7xbd90tHge2Hsz_heGWltk69f8lfSbasmuejxx4M4RP6t6gaTD8XwQ3MIqwED5BauxMaEpXfpo-IA_UkcIdp_gsWtIkFHHGMP_jXF_e8RJPyoTL-lmZd1EDEHknXu-jN0k8o8N7iUBgyG308hB2BEgNzwagH92TOBctqYNKIBue0qjcNFkfZBNj0jiHOGBDnYPQKexBqE7HwH5qmXseCzcP7bXfjEdDl3wyG1f-gNf8ZfJPrGR8rpv_E6K59L5hD8QBmO4yKXFhusWVRagslZnHiwFvP-C8JIz3pteSRGy_BTCXXK-XRVz1B507X79kxlRc9-IFmaZK4hWIPU?testcase_id=6090451762544640 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Apr 18 2017
This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Apr 18 2017
,
Apr 19 2017
,
Apr 19 2017
,
Apr 19 2017
ClusterFuzz has detected this issue as fixed in range 465158:465177. Detailed report: https://clusterfuzz.com/testcase?key=6090451762544640 Fuzzer: libfuzzer_pdfium_xfa_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: CFGAS_TextStream::InitStream CFX_RetainPtr<CFGAS_TextStream> pdfium::MakeRetain<CFGAS_TextStream, std::__1::u IFGAS_Stream::CreateReadStream Sanitizer: memory (MSAN) Recommended Security Severity: Medium Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_msan&range=465141:465158 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_msan&range=465158:465177 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv94027vPA3JK27PF1l06AltXLXFwOHkv4m7xbd90tHge2Hsz_heGWltk69f8lfSbasmuejxx4M4RP6t6gaTD8XwQ3MIqwED5BauxMaEpXfpo-IA_UkcIdp_gsWtIkFHHGMP_jXF_e8RJPyoTL-lmZd1EDEHknXu-jN0k8o8N7iUBgyG308hB2BEgNzwagH92TOBctqYNKIBue0qjcNFkfZBNj0jiHOGBDnYPQKexBqE7HwH5qmXseCzcP7bXfjEdDl3wyG1f-gNf8ZfJPrGR8rpv_E6K59L5hD8QBmO4yKXFhusWVRagslZnHiwFvP-C8JIz3pteSRGy_BTCXXK-XRVz1B507X79kxlRc9-IFmaZK4hWIPU?testcase_id=6090451762544640 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Apr 19 2017
ClusterFuzz testcase 6090451762544640 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Apr 19 2017
,
Apr 19 2017
Don't see any reason why this would be fixed. Re-opening. Removed the Release-Block as this is XFA and is not enabled on any branch of chrome.
,
Apr 19 2017
,
Apr 20 2017
,
May 2 2017
Bulk-WontFixing these bugs. This was a bug on ClusterFuzz side, see bug 717534. We will start seeing new testcases auto-filed in a day or two. We can't leave these open as ClusterFuzz won't autoverify them after ClusterFuzz-Wrong label.
,
Aug 9 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Sep 18 2017
We have made a bunch of changes on ClusterFuzz side, so resetting ClusterFuzz-Wrong label. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by sheriffbot@chromium.org
, Apr 18 2017