New issue
Advanced search Search tips

Issue 917031 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Closed: Jan 15
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

ASSERT: obj_start <= obj_end

Project Member Reported by ClusterFuzz, Dec 20

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5662548265009152

Fuzzer: libFuzzer_harfbuzz_fuzzer
Fuzz target binary: harfbuzz_fuzzer
Job Type: x86_libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  obj_start <= obj_end
  void hb_sanitize_context_t::set_object<OT::KernSubTable<OT::KernAATSubTableHeade
  hb_sanitize_with_object_t::hb_sanitize_with_object_t<OT::KernSubTable<OT::KernAA
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5662548265009152

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally.
 
Project Member

Comment 1 by ClusterFuzz, Dec 20

Cc: mmoroz@chromium.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Cc: pnangunoori@chromium.org
Labels: M-72 Test-Predator-Wrong CF-NeedsTriage
Unable to provide possible suspect using Predator, CL and Code Search.
Could someone please look into the issue.
Thank You.
Cc: -mmoroz@chromium.org
Owner: behdadb@chromium.org
Status: Assigned (was: Untriaged)
Owner: behdad@chromium.org
Project Member

Comment 6 by ClusterFuzz, Jan 15

ClusterFuzz has detected this issue as fixed in range 622781:622791.

Detailed report: https://clusterfuzz.com/testcase?key=5662548265009152

Fuzzer: libFuzzer_harfbuzz_fuzzer
Fuzz target binary: harfbuzz_fuzzer
Job Type: x86_libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  obj_start <= obj_end
  void hb_sanitize_context_t::set_object<OT::KernSubTable<OT::KernAATSubTableHeade
  hb_sanitize_with_object_t::hb_sanitize_with_object_t<OT::KernSubTable<OT::KernAA
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=x86_libfuzzer_chrome_asan_debug&range=622781:622791

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5662548265009152

See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 7 by ClusterFuzz, Jan 15

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5662548265009152 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment