New issue
Advanced search Search tips

Issue 923920 link

Starred by 1 user

Issue metadata

Status: Assigned
Owner:
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference READ in blink::ImageResourceContent::NotifyObservers

Project Member Reported by ClusterFuzz, Yesterday (35 hours ago)

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6003227657109504

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000000
Crash State:
  blink::ImageResourceContent::NotifyObservers
  blink::ImageResourceContent::UpdateImage
  blink::ImageResource::DecodeError
  
Sanitizer: undefined (UBSAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6003227657109504

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally.
 

Comment 1 by kkaluri@chromium.org, Today (58 minutes ago)

Cc: kkaluri@chromium.org
Labels: M-73 Test-Predator-Wrong
Owner: pdr@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, "image_resource_content.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://chromium.googlesource.com/chromium/src/+/06a02a9ff371075795b40ad0448d12b617822d89

pdr@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

Sign in to add a comment