New issue
Advanced search Search tips

Issue 816345 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Mar 2018
Cc:
rohitrao@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug-Security



Sign in to add a comment

Heap-buffer-overflow in __printf_chk

Project Member Reported by ClusterFuzz, Feb 26 2018 
Detailed report: https://clusterfuzz.com/testcase?key=5244128041107456

Fuzzer: noel-image-flip
Job Type: linux_asan_chrome_chromeos
Platform Id: linux

Crash Type: Heap-buffer-overflow READ {*}
Crash Address: 0x7f6cca62c800
Crash State:
  __printf_chk
  
Sanitizer: address (ASAN)

Recommended Security Severity: Low

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_chrome_chromeos&range=539049:539050

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5244128041107456

Additional requirements: Requires Gestures

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
Project Member

Comment 1 by ClusterFuzz, Feb 26 2018

Labels: Test-Predator-Auto-Owner
Owner: rohitrao@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/bd061a082fcf108b2fb2898886a6155cda2f02b2 ([ios] Makes ReauthenticationModuleTest inherit from PlatformTest.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

Comment 2 by rohitrao@chromium.org, Feb 26 2018

Cc: rohitrao@chromium.org
Labels: Test-Predator-Wrong-CLs
Owner: ----
Status: Available (was: Assigned)
https://chromium.googlesource.com/chromium/src/+/bd061a082fcf108b2fb2898886a6155cda2f02b2 only touched files in ios/, which should not have any affect on the linux_asan_chrome_chromeos bots.
Project Member

Comment 3 by sheriffbot@chromium.org, Feb 26 2018

Labels: Pri-2
Project Member

Comment 4 by ClusterFuzz, Mar 12 2018

Status: WontFix (was: Available)
ClusterFuzz testcase 5244128041107456 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 5 by sheriffbot@chromium.org, Jun 18 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment