New issue
Advanced search Search tips

Issue 770159 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Mar 2018
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference READ in update_current_folder_get_info_cb

Project Member Reported by ClusterFuzz, Sep 29 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6543652292919296

Fuzzer: fermin_swf_bitflip
Job Type: linux_asan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000198
Crash State:
  update_current_folder_get_info_cb
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6543652292919296

Additional requirements: Requires Gestures

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
 
Labels: Test-Predator-Wrong CF-NeedsTriage
Redo Task has been performed for regression range.
Thank You.
Labels: -CF-NeedsTriage
Owner: mmoroz@chromium.org
This is an unreproducible test report. mmoroz@, do you think we still need to triage?

Comment 3 by mmoroz@chromium.org, Oct 26 2017

Cc: metzman@chromium.org och...@chromium.org mbarbe...@chromium.org infe...@chromium.org
In general yes, but this particular crash happens in #0 0x7fbfbb146525 in update_current_folder_get_info_cb /build/gtk+3.0-3sSotQ/gtk+3.0-3.10.8/gtk/gtkfilechooserdefault.c:4541

So I'm not sure how we should address that.
Project Member

Comment 4 by ClusterFuzz, Mar 15 2018

Status: WontFix (was: Untriaged)
ClusterFuzz testcase 6543652292919296 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment