New issue
Advanced search Search tips

Issue 798081 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner:
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 3
Type: Bug-Security



Sign in to add a comment

Unknown exception in Register, libglesv2.dll

Project Member Reported by ClusterFuzz, Dec 29 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4583672144723968

Fuzzer: inferno_layout_test_unmodified
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Unknown exception
Crash Address: 0x007ed088
Crash State:
  Register
  Register
  Register
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=512219:512265

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4583672144723968

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Dec 29 2017

Components: Internals>GPU>Internals
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Dec 29 2017

Labels: Test-Predator-Auto-Owner
Owner: tsepez@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/cff80254855685dd43a0a42eae3b3866ce3f0a41 (Move broker_process_ from policies to SandboxLinux itself).

If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
Project Member

Comment 3 by sheriffbot@chromium.org, Dec 29 2017

Labels: M-64
Project Member

Comment 4 by sheriffbot@chromium.org, Dec 29 2017

Labels: ReleaseBlock-Stable
This is a serious security regression. If you are not able to fix this quickly, please revert the change that introduced it.

If this doesn't affect a release branch, or has not been properly classified for severity, please update the Security_Impact or Security_Severity labels, and remove the ReleaseBlock label. To disable this altogether, apply ReleaseBlock-NA.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 5 by sheriffbot@chromium.org, Dec 29 2017

Labels: Pri-1
Cc: cwallez@chromium.org
Components: Internals>GPU>SwiftShader
Summary: Unknown exception in Register, libglesv2.dll (was: Unknown exception in Register)
I'm not sure how the auto-triage works, but the SwiftShader roll in the regression range contained a few changes that seem more likely culprits.

https://swiftshader.googlesource.com/SwiftShader.git/+log/ec5da19..6e27fea
Cc: tsepez@chromium.org
Owner: capn@chromium.org
Thanks. The roll contains the commits creating the fuzzer, so this is a pre-existing bug. Assigning to capn@

Comment 8 by capn@chromium.org, Jan 2 2018

Labels: -Pri-1 -Security_Severity-High -ReleaseBlock-Stable Security_Severity-Low ReleaseBlock-NA Pri-3
Canvas is huge (17000x17000) so it runs out of memory. Crashing the GPU process is acceptable/expected behavior.
Project Member

Comment 9 by sheriffbot@chromium.org, Jan 25 2018

Labels: -Security_Impact-Beta Security_Impact-Stable
Project Member

Comment 10 by ClusterFuzz, Feb 2 2018

Status: WontFix (was: Assigned)
ClusterFuzz testcase 4583672144723968 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Comment 11 by capn@chromium.org, Feb 2 2018

Because we now have symbols for SwiftShader, clusterfuzz probably no longer identifies it as a crash in Register(), and this will probably pop up again with a new stack trace.
Project Member

Comment 12 by sheriffbot@chromium.org, May 12 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment