Integer-overflow in cf2_interpT2CharString |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5577826685419520 Fuzzer: libfuzzer_pdf_font_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: cf2_interpT2CharString cf2_getGlyphOutline cf2_decoder_parse_charstrings Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=472859:472915 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5577826685419520 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
May 20 2017
,
May 22 2017
Werner, are you aware of this issue? Was this filed on a FreeType specific tracker already?
,
May 22 2017
Yes, cf. https://savannah.nongnu.org/bugs/?48979 All such overflows are completely harmless.
,
May 22 2017
,
Jun 30 2017
ClusterFuzz has detected this issue as fixed in range 483358:483512. Detailed report: https://clusterfuzz.com/testcase?key=5577826685419520 Fuzzer: libFuzzer_pdf_font_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: cf2_interpT2CharString cf2_getGlyphOutline cf2_decoder_parse_charstrings Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=472859:472915 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=483358:483512 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5577826685419520 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 30 2017
ClusterFuzz testcase 5577826685419520 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by npm@chromium.org
, May 19 2017Components: Internals>Plugins>PDF
Status: Available (was: Untriaged)