New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 761225 link

Starred by 1 user
Status: Duplicate
Merged: issue 759355
Owner:
yoichio@chromium.org
Closed: Sep 2017
Cc:
█ wkorman@chromium.org
editing-dev@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: ----
Type: Bug-Security



Sign in to add a comment

Use-of-uninitialized-value in blink::InlineTextBox::GetSelectionState

Project Member Reported by ClusterFuzz, Sep 1 2017 
Detailed report: https://clusterfuzz.com/testcase?key=5701346547466240

Fuzzer: bj_broddelwerk
Job Type: linux_msan_chrome
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  blink::InlineTextBox::GetSelectionState
  blink::InlineTextBoxPainter::Paint
  blink::InlineTextBox::Paint
  
Sanitizer: memory (MSAN)

Recommended Security Severity: Medium

Regressed: https://clusterfuzz.com/revisions?job=linux_msan_chrome&range=496838:496881

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5701346547466240

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by dominickn@chromium.org, Sep 1 2017

Cc: wkorman@chromium.org
Components: Blink>Layout Blink>Editing>Selection
Owner: yoichio@chromium.org
Status: Assigned (was: Untriaged)
yoichio: can you please take a look at this? Your CL https://chromium.googlesource.com/chromium/src/+/bbcefe73280faa1c5b52349df11f45906ce14d44 is the only one in the blame range that looks like it might be related. Please retriage as necessary, thanks!

Comment 2 by yoichio@chromium.org, Sep 1 2017

Mergedinto: 759355
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by sheriffbot@chromium.org, Dec 18 2017

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment