New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 859281 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Last visit > 30 days ago
Closed: Jul 4
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Abrt in rtc::webrtc_checks_impl::FatalLog

Project Member Reported by ClusterFuzz, Jun 30 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4673847723556864

Fuzzer: libFuzzer_rtp_packet_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x05390000724e
Crash State:
  rtc::webrtc_checks_impl::FatalLog
  Call<>
  webrtc::RtpGenericFrameDescriptor::AddFrameDependencyDiff
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=571639:571660

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4673847723556864

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, Jun 30 2018

Cc: kwiberg@webrtc.org mflodman@webrtc.org henrika@webrtc.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Project Member

Comment 2 by ClusterFuzz, Jun 30 2018

Cc: danilchap@webrtc.org
Labels: Test-Predator-Auto-CC
Automatically adding ccs based on suspected regression changelists:

Add Generic frame descritpor header extension by danilchap@webrtc.org - https://webrtc.googlesource.com/src/+/916ec7dadf7f8da29b3ac187d55cc8bc1340dab8

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
Owner: danilchap@chromium.org
Status: Assigned (was: Untriaged)
Project Member

Comment 4 by bugdroid1@chromium.org, Jul 3

The following revision refers to this bug:
  https://webrtc.googlesource.com/src.git/+/e40b437401966fe06b0c4d5430c35e4494675c90

commit e40b437401966fe06b0c4d5430c35e4494675c90
Author: Danil Chapovalov <danilchap@webrtc.org>
Date: Tue Jul 03 10:28:05 2018

Discard frame self-dependency when parsing genric frame descriptor

Bug:  chromium:859281 
Change-Id: Ieb96f633a93f4f2e498bb1949339e239184bce9d
Reviewed-on: https://webrtc-review.googlesource.com/86545
Reviewed-by: Philip Eliasson <philipel@webrtc.org>
Reviewed-by: Alex Loiko <aleloi@webrtc.org>
Commit-Queue: Danil Chapovalov <danilchap@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#23817}
[modify] https://crrev.com/e40b437401966fe06b0c4d5430c35e4494675c90/modules/rtp_rtcp/source/rtp_generic_frame_descriptor.cc
[add] https://crrev.com/e40b437401966fe06b0c4d5430c35e4494675c90/test/fuzzers/corpora/rtp-corpus/rtp-7

Project Member

Comment 5 by bugdroid1@chromium.org, Jul 3

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/88c6551b7614931be67a2d1f3da4b7a68184a3de

commit 88c6551b7614931be67a2d1f3da4b7a68184a3de
Author: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Date: Tue Jul 03 15:33:41 2018

Roll src/third_party/webrtc 46f858a626d5..3bc977a42022 (3 commits)

https://webrtc.googlesource.com/src.git/+log/46f858a626d5..3bc977a42022


git log 46f858a626d5..3bc977a42022 --date=short --no-merges --format='%ad %ae %s'
2018-07-03 mbonadei@webrtc.org Revert "Add sprang@ as owner of simulcast.cc/h"
2018-07-03 danilchap@webrtc.org Discard frame self-dependency when parsing genric frame descriptor
2018-07-03 buildbot@webrtc.org Roll chromium_revision f6935ecdd2..ce19c6d80b (572058:572160)


Created with:
  gclient setdep -r src/third_party/webrtc@3bc977a42022

The AutoRoll server is located here: https://webrtc-chromium-roll.skia.org

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+/master/autoroll/README.md

If the roll is causing failures, please contact the current sheriff, who should
be CC'd on the roll, and stop the roller if necessary.

CQ_INCLUDE_TRYBOTS=luci.chromium.try:linux_chromium_archive_rel_ng;master.tryserver.chromium.mac:mac_chromium_archive_rel_ng

BUG=chromium:None,chromium:859281,chromium:None
TBR=webrtc-chromium-sheriffs-robots@google.com

Change-Id: Iafdb693db9daef07e8dac90bdc685e15e154e8df
Reviewed-on: https://chromium-review.googlesource.com/1124641
Reviewed-by: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Commit-Queue: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Cr-Commit-Position: refs/heads/master@{#572228}
[modify] https://crrev.com/88c6551b7614931be67a2d1f3da4b7a68184a3de/DEPS

Project Member

Comment 6 by ClusterFuzz, Jul 4

ClusterFuzz has detected this issue as fixed in range 572223:572237.

Detailed report: https://clusterfuzz.com/testcase?key=4673847723556864

Fuzzer: libFuzzer_rtp_packet_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x05390000724e
Crash State:
  rtc::webrtc_checks_impl::FatalLog
  Call<>
  webrtc::RtpGenericFrameDescriptor::AddFrameDependencyDiff
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=571639:571660
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=572223:572237

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4673847723556864

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 7 by ClusterFuzz, Jul 4

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 4673847723556864 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Components: Blink>WebRTC>Network
Labels: M-69

Sign in to add a comment