pobfuzz: GrTessellator::PathToTriangles -> path_to_polys -> tessellate integer overflow |
||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6196748019302400 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: tessellate contours_to_polys path_to_polys Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=497456:497511 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6196748019302400 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Sep 18 2017
,
Oct 4 2017
Automatically assigning owner based on suspected regression changelist https://skia.googlesource.com/skia/+/8296e752fa1803dcb8cf97d6ab10bb4f5f5f51f0 (Switch atlas clients over to using absolute texture coordinates (take 2)). If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
,
Oct 24 2017
For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md. The link referenced in the description is no longer valid.
,
Nov 1 2017
,
Nov 7 2017
,
Nov 22 2017
ClusterFuzz has detected this issue as fixed in range 518512:518527. Detailed report: https://clusterfuzz.com/testcase?key=6196748019302400 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: tessellate contours_to_polys path_to_polys Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=497456:497511 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=518512:518527 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6196748019302400 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Nov 22 2017
ClusterFuzz testcase 6196748019302400 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||||||
►
Sign in to add a comment |
||||||
Comment 1 by kkaluri@chromium.org
, Sep 18 2017Components: Internals>GPU
Labels: M-63 Test-Predator-Wrong
Owner: senorblanco@chromium.org
Status: Assigned (was: Untriaged)