CHECK failure: false in webm_content_encodings_client.cc |
|||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6291972330618880 Fuzzer: libFuzzer_mediasource_WEBM_VP9_pipeline_integration_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false in webm_content_encodings_client.cc base::debug::DebugBreak media::WebMContentEncodingsClient::OnUInt Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=497039:497107 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6291972330618880 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Aug 25 2017
,
Aug 25 2017
I have a local repro using the fuzzer case. Concerningly, the line before this DCHECK(false) is: // This should not happen if WebMListParser is working properly. Investigating...
,
Aug 25 2017
,
Aug 29 2017
,
Aug 31 2017
=> xhwang@ : It looks like at least kWebMIdContentSigAlgo is *not* handled properly when the webm parser finds it. In fact, I don't see any place in our code where that EBML Tag ID is even used other than being defined and defined as a valid UINT member of a list kWebMIdContentEncryption pieces. In debug builds -> DCHECK In release builds -> parse error I'm not at all clear on what the real correct behavior for Chrome should be though. It seems from the line right before the DCHECK, though, that this DCHECK's failure is unexpected. Please take a look. Thanks!
,
Aug 31 2017
I'll take a look
,
Sep 13 2017
Given this is a DCHECK and in release mode we handle the error correctly, I am going to move this issue to P2.
,
Oct 1 2017
Automatically applying components based on information from OWNERS files. If this seems incorrect, please apply the Test-Predator-Wrong-Components label.
,
Oct 10 2017
,
Oct 10 2017
,
Oct 24 2017
For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md. The link referenced in the description is no longer valid.
,
Nov 2 2017
,
Nov 7 2017
,
Dec 1
ClusterFuzz testcase 6291972330618880 appears to be flaky, updating reproducibility label.
,
Dec 1
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
,
Dec 1
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
,
Jan 9
ClusterFuzz has detected this issue as fixed in range 621021:621022. Detailed report: https://clusterfuzz.com/testcase?key=6291972330618880 Fuzzer: libFuzzer_mediasource_WEBM_VP9_pipeline_integration_fuzzer Fuzz target binary: mediasource_WEBM_VP9_pipeline_integration_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false in webm_content_encodings_client.cc media::WebMContentEncodingsClient::OnUInt media::ParseUInt Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=497039:497107 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=621021:621022 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6291972330618880 See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jan 9
ClusterFuzz testcase 6291972330618880 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||||||||||||
►
Sign in to add a comment |
|||||||||||||||
Comment 1 by msrchandra@chromium.org
, Aug 25 2017Labels: Test-Predator-Wrong-CLs M-62
Owner: dalecur...@chromium.org
Status: Assigned (was: Untriaged)