Direct-leak in pdfium::internal::MakeUniqueResult<GifImage>::Scalar pdfium::MakeUnique<GifImage |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4869621240037376 Fuzzer: libfuzzer_pdf_codec_gif_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Direct-leak Crash Address: Crash State: pdfium::internal::MakeUniqueResult<GifImage>::Scalar pdfium::MakeUnique<GifImage gif_decode_image_info gif_get_frame Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=470879:470905 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4869621240037376 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
May 12 2017
The following revision refers to this bug: https://pdfium.googlesource.com/pdfium/+/ef73cf5838ab3a902872d9fc57a90621cc3d7f21 commit ef73cf5838ab3a902872d9fc57a90621cc3d7f21 Author: Nicolas Pena <npm@chromium.org> Date: Fri May 12 18:56:06 2017 Rename ErrorData and fix potential leak This CL fixes a leak that can be caused by a longjmp in ErrorData. The method is renamed to express the fact that it includes such, and a followup should remove the jmps altogether. Bug: chromium:721488 Change-Id: Iefcc82a77a30ff77b7973b05611440a8d5bf275e Reviewed-on: https://pdfium-review.googlesource.com/5450 Commit-Queue: Nicolás Peña <npm@chromium.org> Reviewed-by: Tom Sepez <tsepez@chromium.org> [modify] https://crrev.com/ef73cf5838ab3a902872d9fc57a90621cc3d7f21/core/fxcodec/lgif/cgifcontext.cpp [modify] https://crrev.com/ef73cf5838ab3a902872d9fc57a90621cc3d7f21/core/fxcodec/lgif/fx_gif.cpp [modify] https://crrev.com/ef73cf5838ab3a902872d9fc57a90621cc3d7f21/core/fxcodec/lgif/cgifcontext.h [modify] https://crrev.com/ef73cf5838ab3a902872d9fc57a90621cc3d7f21/core/fxcodec/codec/fx_codec_progress.cpp
,
May 13 2017
ClusterFuzz has detected this issue as fixed in range 471487:471541. Detailed report: https://clusterfuzz.com/testcase?key=4869621240037376 Fuzzer: libfuzzer_pdf_codec_gif_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Direct-leak Crash Address: Crash State: pdfium::internal::MakeUniqueResult<GifImage>::Scalar pdfium::MakeUnique<GifImage gif_decode_image_info gif_get_frame Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=470879:470905 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=471487:471541 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4869621240037376 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
May 13 2017
ClusterFuzz testcase 4869621240037376 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
May 15 2017
|
|||
►
Sign in to add a comment |
|||
Comment 1 by msrchandra@chromium.org
, May 12 2017Labels: M-60 Test-Predator-Correct-CLs
Owner: npm@chromium.org
Status: Assigned (was: Untriaged)