Timeout in pdfium_fuzzer |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6530872869388288 Fuzzer: libFuzzer_pdfium_fuzzer Job Type: libfuzzer_chrome_asan Platform Id: linux Crash Type: Timeout (exceeds 25 secs) Crash Address: Crash State: pdfium_fuzzer Sanitizer: address (ASAN) Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6530872869388288 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
,
Oct 9 2017
As per the Issue 754439 owner assigning this issue to @dsinclair. @dsinclair -- Could you please look into this issue, kindly reassign if it has nothing to do with your changes. Thanks.
,
Oct 18 2017
hnakashima@ can you take a look? Looks like something in the JBig2 decode logic.
,
Oct 19 2017
The test case finishes, but it takes minutes: Executed /usr/local/google/home/hnakashima/Downloads/clusterfuzz-testcase-6530872869388288 in 335297 ms There is a "for (;;)" loop in CJBig2_SDDProc::decode_Arith() where it gets stuck for a while, until the check "if ((int)SYMWIDTH < 0 || (int)SYMWIDTH > JBIG2_MAX_IMAGE_SIZE)" eventually breaks the decoding.
,
Oct 23 2017
The JBig2 format is quite complicated, I don't know how we could check that this case is invalid without actually trying to decode.
,
Oct 24 2017
For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md. The link referenced in the description is no longer valid.
,
Oct 24 2017
,
Nov 7 2017
|
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ClusterFuzz
, Oct 6 2017Labels: Test-Predator-AutoComponents