New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 884071 link

Starred by 2 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Chrome
Pri: 1
Type: Bug



Sign in to add a comment

Abrt in webrtc::video_coding::RtpFrameObject::RtpFrameObject

Project Member Reported by ClusterFuzz, Sep 14

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6434618168049664

Fuzzer: afl_rtp_frame_reference_finder_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x053900002203
Crash State:
  webrtc::video_coding::RtpFrameObject::RtpFrameObject
  webrtc::FuzzOneInput
  webrtc_fuzzer_main.cc
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=591170:591178

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6434618168049664

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Components: Blink>WebRTC
Cc: kkaluri@chromium.org
Labels: M-71 Test-Predator-Wrong
Owner: kwiberg@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, "rtp_frame_reference_finder_fuzzer.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://webrtc.googlesource.com/src.git/+/918f50c5d14040385e912a676e739e9248b03aef

kwiberg@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!
Components: -Blink>WebRTC Blink>WebRTC>Video
Owner: ----
Status: Untriaged (was: Assigned)
My CL appears unlikely to cause this sort of problem, because it just rewrites calls to use the same functions by different names (with a regexp, so limited risk of human errors creeping in). Also, it touches over a thousand source files and doesn't appear to have caused any problems in the 2.5 months since it landed.

Routing to the Video component, since it's a CHECK failure in video coding code.
Cc: kwiberg@chromium.org
Labels: CF-NeedsTriage
Unable to provide possible suspect using Predator, CL and Code Search.
Could someone please look into the issue.

Thank You...
Owner: philipel@chromium.org
Status: Assigned (was: Untriaged)
Possibly related to https://webrtc.googlesource.com/src/+/ef615ea7a3960f13aeb341e9a76e627aff875238 ?
Labels: -CF-NeedsTriage
philipel@, just wondering did you get a chance to look into this?
Cc: philipel@chromium.org
Owner: ----
Status: Available (was: Assigned)
Unassigning in preparation for the upcoming fuzzathon, to give others a chance to pick it up. 

Please feel free to reassign yourself if you still wish to own this.
Project Member

Comment 9 by ClusterFuzz, Nov 29

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 6434618168049664 appears to be flaky, updating reproducibility label.
Project Member

Comment 10 by ClusterFuzz, Dec 4

Labels: OS-Chrome

Sign in to add a comment