Integer-overflow in _hb_ot_shape_fallback_spaces |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6044669881090048 Fuzzer: miaubiz_svg_fuzzer Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: _hb_ot_shape_fallback_spaces hb_ot_position_default hb_ot_position Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=390221:390292 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6044669881090048 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Feb 19 2018
Unable to find actual suspect through code search nor from the provided regression range. observing similar issue 657466 with same stack has marked as wont fix recently. behdad@ Could you please confirm is this issue is duplicate of bug 657466 ? Thanks!
,
Feb 19 2018
Yes, looks the same to me.
,
Feb 22 2018
ClusterFuzz has detected this issue as fixed in range 538102:538104. Detailed report: https://clusterfuzz.com/testcase?key=6044669881090048 Fuzzer: miaubiz_svg_fuzzer Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: _hb_ot_shape_fallback_spaces hb_ot_position_default hb_ot_position Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=390221:390292 Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=538102:538104 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6044669881090048 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Feb 22 2018
ClusterFuzz testcase 6044669881090048 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by ClusterFuzz
, Feb 17 2018Labels: Test-Predator-Auto-Components