New issue
Advanced search Search tips

Issue 826109 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2018
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug-Security



Sign in to add a comment

Heap-buffer-overflow in swrast_dri.so

Project Member Reported by ClusterFuzz, Mar 27 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5980423310802944

Fuzzer: lcamtuf_cross_fuzz
Job Type: linux_asan_chrome_chromeos
Platform Id: linux

Crash Type: Heap-buffer-overflow READ {*}
Crash Address: 0x7ff10365b800
Crash State:
  swrast_dri.so
  
Sanitizer: address (ASAN)

Recommended Security Severity: Low

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5980423310802944

Additional requirements: Requires Gestures

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
 
Project Member

Comment 1 by sheriffbot@chromium.org, Mar 27 2018

Labels: Pri-2
Project Member

Comment 2 by ClusterFuzz, Apr 26 2018

Status: WontFix (was: Untriaged)
ClusterFuzz testcase 5980423310802944 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 3 by sheriffbot@chromium.org, Aug 2

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment