Issue metadata
Sign in to add a comment
|
Heap-use-after-free in fxcrt::UnownedPtr<CPDF_Array const>::ProbeForLowSeverityLifetimeIssue |
||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4613114137149440 Fuzzer: libFuzzer_pdfium_xfa_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x605000002c30 Crash State: fxcrt::UnownedPtr<CPDF_Array const>::ProbeForLowSeverityLifetimeIssue CPDF_SecurityHandler::~CPDF_SecurityHandler CPDF_Parser::ReleaseEncryptHandler Sanitizer: address (ASAN) Recommended Security Severity: High Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=506125:506169 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4613114137149440 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Oct 5 2017
Probably duplicate of bug 771479 . Shall we just let CF figure it out for itself?
,
Oct 10 2017
The referenced issue still reproduces on HEAD
,
Oct 10 2017
,
Oct 11 2017
ClusterFuzz has detected this issue as fixed in range 507766:507811. Detailed report: https://clusterfuzz.com/testcase?key=4613114137149440 Fuzzer: libFuzzer_pdfium_xfa_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x605000002c30 Crash State: fxcrt::UnownedPtr<CPDF_Array const>::ProbeForLowSeverityLifetimeIssue CPDF_SecurityHandler::~CPDF_SecurityHandler CPDF_Parser::ReleaseEncryptHandler Sanitizer: address (ASAN) Recommended Security Severity: High Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=506125:506169 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=507766:507811 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4613114137149440 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 11 2017
ClusterFuzz testcase 4613114137149440 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 11 2017
,
Nov 7 2017
,
Jan 17 2018
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by ClusterFuzz
, Oct 5 2017Labels: Test-Predator-AutoComponents