New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 852554 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Jun 2018
Cc:
ifratric@google.com
█ brajkumar@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Integer-overflow in blink::ListMarkerText::ToCJKIdeographic

Project Member Reported by ClusterFuzz, Jun 13 2018 
Detailed report: https://clusterfuzz.com/testcase?key=6122116416798720

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  blink::ListMarkerText::ToCJKIdeographic
  blink::ListMarkerText::GetText
  blink::LayoutListMarker::UpdateContent
  
Sanitizer: undefined (UBSAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6122116416798720

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by brajkumar@chromium.org, Jun 14 2018

Cc: brajkumar@chromium.org
Components: Blink
Labels: M-68 Test-Predator-Wrong CF-NeedsTriage
Unable to find actual suspect through code search and also observing no CL's under regression range, hence adding appropriate label and requesting someone from blink team to look in to this issue.

Thanks!

Comment 2 by rtoy@chromium.org, Jun 14 2018

Components: -Blink Blink>Layout

Comment 3 by e...@chromium.org, Jun 15 2018

Status: WontFix (was: Untriaged)
Project Member

Comment 4 by ClusterFuzz, Jun 22 2018

Labels: Needs-Feedback
ClusterFuzz testcase 6122116416798720 is still reproducing on tip-of-tree build (trunk).

If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase.

Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
►

Sign in to add a comment