New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 805259 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Null-dereference READ in blink::ImageResourceContent::ErrorOccurred

Project Member Reported by ClusterFuzz, Jan 24 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6286261773139968

Fuzzer: ifratric-browserfuzzer-v3
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Null-dereference READ
Crash Address: 0x000000000009
Crash State:
  blink::ImageResourceContent::ErrorOccurred
  blink::CSSImageValue::CacheImage
  blink::ElementStyleResources::LoadPendingImages
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6286261773139968

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Cc: brajkumar@chromium.org
Components: Blink>CSS
Labels: -Type-Bug M-64 Test-Predator-Wrong Type-Bug-Regression
Owner: japhet@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, "CSSImageValue.cpp" and observed there was some recent changes for the below file.

Suspect CL: https://chromium.googlesource.com/chromium/src/+/4dbf9074bf278f34ec10239ee2a0102b5760e855

japhet@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!
 Issue 804905  has been merged into this issue.
 Issue 804882  has been merged into this issue.
Project Member

Comment 4 by ClusterFuzz, Jan 24 2018

ClusterFuzz has detected this issue as fixed in range 531319:531340.

Detailed report: https://clusterfuzz.com/testcase?key=6286261773139968

Fuzzer: ifratric-browserfuzzer-v3
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Null-dereference READ
Crash Address: 0x000000000009
Crash State:
  blink::ImageResourceContent::ErrorOccurred
  blink::CSSImageValue::CacheImage
  blink::ElementStyleResources::LoadPendingImages
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=531319:531340

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6286261773139968

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Jan 24 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6286261773139968 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 6 by ClusterFuzz, Feb 2 2018

Components: Blink>Loader
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Sign in to add a comment