ASSERT: nBits <= 32 |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5519886210826240 Fuzzer: libFuzzer_pdf_hint_table_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: ASSERT Crash Address: Crash State: nBits <= 32 CFX_BitStream::GetBits CPDF_HintTables::ReadSharedObjHintTable Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=578609:578610 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5519886210826240 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
,
Jul 27
Automatically adding ccs based on suspected regression changelists: Parse obj nums range within Hint tables for shared groups. by art-snake@yandex-team.ru - https://pdfium.googlesource.com/pdfium/+/b3bab6ce43cab8f4cd35e2205491c278a400d733 If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
,
Jul 27
,
Jul 30
The following revision refers to this bug: https://pdfium.googlesource.com/pdfium/+/552f1ec14f94c09fce4126b5e72d3c02c150ab35 commit 552f1ec14f94c09fce4126b5e72d3c02c150ab35 Author: Artem Strygin <art-snake@yandex-team.ru> Date: Mon Jul 30 16:30:28 2018 Check maximum bit count of shared group object numbers. Bug: chromium:868477 Change-Id: I5957c5ef051bc4fa8eb51efa6a7fc142996742c5 Reviewed-on: https://pdfium-review.googlesource.com/39130 Commit-Queue: Art Snake <art-snake@yandex-team.ru> Reviewed-by: Henrique Nakashima <hnakashima@chromium.org> [modify] https://crrev.com/552f1ec14f94c09fce4126b5e72d3c02c150ab35/core/fpdfapi/parser/cpdf_hint_tables.cpp
,
Jul 30
,
Jul 30
Issue 868664 has been merged into this issue.
,
Jul 30
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/1ad1c6c2636aed0aca6c7023730b2b0b7b5fa861 commit 1ad1c6c2636aed0aca6c7023730b2b0b7b5fa861 Author: pdfium-chromium-autoroll <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com> Date: Mon Jul 30 22:05:27 2018 Roll src/third_party/pdfium 8584902d81ff..d718d634b7aa (5 commits) https://pdfium.googlesource.com/pdfium.git/+log/8584902d81ff..d718d634b7aa git log 8584902d81ff..d718d634b7aa --date=short --no-merges --format='%ad %ae %s' 2018-07-30 tsepez@chromium.org Type-safe iteration over CXFA_ContentLayoutItems. 2018-07-30 thestig@chromium.org Fix a misspelling of "locale". 2018-07-30 thestig@chromium.org Remove a NOTREACHED() in FormValueNode_SetChildContent(). 2018-07-30 hnakashima@chromium.org Remove CFGAS_PDFFontMgr::m_FDE2PDFFont font cache. 2018-07-30 art-snake@yandex-team.ru Check maximum bit count of shared group object numbers. Created with: gclient setdep -r src/third_party/pdfium@d718d634b7aa The AutoRoll server is located here: https://pdfium-roll.skia.org Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+/master/autoroll/README.md If the roll is causing failures, please contact the current sheriff, who should be CC'd on the roll, and stop the roller if necessary. BUG= chromium:868477 TBR=dsinclair@chromium.org Change-Id: I1c8753d90baf966d4c51eb20fec35a26ca8d2778 Reviewed-on: https://chromium-review.googlesource.com/1155429 Reviewed-by: pdfium-chromium-autoroll <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com> Commit-Queue: pdfium-chromium-autoroll <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com> Cr-Commit-Position: refs/heads/master@{#579188} [modify] https://crrev.com/1ad1c6c2636aed0aca6c7023730b2b0b7b5fa861/DEPS
,
Jul 31
ClusterFuzz has detected this issue as fixed in range 579185:579189. Detailed report: https://clusterfuzz.com/testcase?key=5519886210826240 Fuzzer: libFuzzer_pdf_hint_table_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: ASSERT Crash Address: Crash State: nBits <= 32 CFX_BitStream::GetBits CPDF_HintTables::ReadSharedObjHintTable Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=578609:578610 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=579185:579189 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5519886210826240 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 31
ClusterFuzz testcase 5519886210826240 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ClusterFuzz
, Jul 27Labels: Test-Predator-Auto-Components