10345.json

{
    "localId": 10345,
    "project": "harfbuzz",
    "fix": "https://github.com/harfbuzz/harfbuzz/commit/f8ccb545c47abe8f0f4ed318ff7b5bf176913893",
    "verify": "0",
    "fuzzer": "libfuzzer",
    "sanitizer": "asan",
    "crash_type": "Heap-buffer-overflow READ 4",
    "severity": "Medium",
    "report": {
        "comments": [
            {
                "localId": 10345,
                "descriptionNum": 1,
                "projectName": "oss-fuzz",
                "commenter": {
                    "displayName": "ClusterFuzz-External",
                    "userId": "382749006"
                },
                "content": "Detailed report: https://oss-fuzz.com/testcase?key=5630904853069824\n\nProject: harfbuzz\nFuzzer: libFuzzer_harfbuzz_hb-subset-get-codepoints-fuzzer\nFuzz target binary: hb-subset-get-codepoints-fuzzer\nJob Type: libfuzzer_asan_harfbuzz\nPlatform Id: linux\n\nCrash Type: Heap-buffer-overflow READ 4\nCrash Address: 0x616000002880\nCrash State:\n  OT::TableRecord::cmp\n  int OT::SortedArrayOf<OT::TableRecord, OT::BinSearchHeader>::bsearch<OT::Tag>\n  OT::OffsetTable::find_table_index\n  \nSanitizer: address (ASAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_harfbuzz&range=201809130140:201809140140\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=5630904853069824\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.\n\nWhen you fix this bug, please\n  * mention the fix revision(s).\n  * state whether the bug was a short-lived regression or an old bug in any stable releases.\n  * add any other useful information.\nThis information can help downstream consumers.\n\nIf you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues.",
                "timestamp": 1536912650
            },
            {
                "amendments": [
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "OS-Linux"
                    }
                ],
                "localId": 10345,
                "projectName": "oss-fuzz",
                "commenter": {
                    "displayName": "ClusterFuzz-External",
                    "userId": "382749006"
                },
                "sequenceNum": 1,
                "timestamp": 1536913831
            },
            {
                "localId": 10345,
                "projectName": "oss-fuzz",
                "commenter": {
                    "displayName": "ClusterFuzz-External",
                    "userId": "382749006"
                },
                "content": "ClusterFuzz has detected this issue as fixed in range 201809140140:201809150140.\n\nDetailed report: https://oss-fuzz.com/testcase?key=5630904853069824\n\nProject: harfbuzz\nFuzzer: libFuzzer_harfbuzz_hb-subset-get-codepoints-fuzzer\nFuzz target binary: hb-subset-get-codepoints-fuzzer\nJob Type: libfuzzer_asan_harfbuzz\nPlatform Id: linux\n\nCrash Type: Heap-buffer-overflow READ 4\nCrash Address: 0x616000002880\nCrash State:\n  OT::TableRecord::cmp\n  int OT::SortedArrayOf<OT::TableRecord, OT::BinSearchHeader>::bsearch<OT::Tag>\n  OT::OffsetTable::find_table_index\n  \nSanitizer: address (ASAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_harfbuzz&range=201809130140:201809140140\nFixed: https://oss-fuzz.com/revisions?job=libfuzzer_asan_harfbuzz&range=201809140140:201809150140\n\nReproducer Testcase: https://oss-fuzz.com/download?testcase_id=5630904853069824\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nIf you suspect that the result above is incorrect, try re-doing that job on the test case report page.",
                "sequenceNum": 2,
                "timestamp": 1536996010
            },
            {
                "amendments": [
                    {
                        "fieldName": "Status",
                        "oldValue": "New",
                        "newOrDeltaValue": "Verified"
                    },
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "ClusterFuzz-Verified"
                    }
                ],
                "localId": 10345,
                "projectName": "oss-fuzz",
                "commenter": {
                    "displayName": "ClusterFuzz-External",
                    "userId": "382749006"
                },
                "content": "ClusterFuzz testcase 5630904853069824 is verified as fixed, so closing issue as verified.\n\nIf this is incorrect, please file a bug on https://github.com/google/oss-fuzz/issues/new",
                "sequenceNum": 3,
                "timestamp": 1536996189
            },
            {
                "amendments": [
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "-restrict-view-commit"
                    }
                ],
                "localId": 10345,
                "projectName": "oss-fuzz",
                "commenter": {
                    "displayName": "sheriffbot@chromium.org",
                    "userId": "4164592774"
                },
                "content": "This bug has been fixed for 30 days. It has been opened to the public.\n\n- Your friendly Sheriffbot",
                "sequenceNum": 4,
                "timestamp": 1539617043
            }
        ]
    },
    "fix_commit": "f8ccb545c47abe8f0f4ed318ff7b5bf176913893",
    "repo_addr": "https://github.com/harfbuzz/harfbuzz.git"
}