1065.json

{
    "fix": "https://github.com/file/file/commit/393dafa41b26a7d8ed593912e0ec1f1e7bd4e406",
    "verify": "2",
    "localId": 1065,
    "project": "file",
    "fuzzer": "libfuzzer",
    "sanitizer": "msan",
    "crash_type": "Use-of-uninitialized-value",
    "severity": "Medium",
    "report": {
        "comments": [
            {
                "projectName": "oss-fuzz",
                "localId": 1065,
                "commenter": {
                    "userId": "382749006",
                    "displayName": "ClusterFuzz-External"
                },
                "timestamp": 1491641409,
                "content": "Detailed report: https://oss-fuzz.com/testcase?key=6203080456536064\n\nProject: file\nFuzzer: libFuzzer_file_magic_fuzzer\nFuzz target binary: magic_fuzzer\nJob Type: libfuzzer_msan_file\nPlatform Id: linux\n\nCrash Type: Use-of-uninitialized-value\nCrash Address: \nCrash State:\n  match\n  file_softmagic\n  mget\n  \nSanitizer: memory (MSAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_msan_file&range=201704041627:201704051628\n\nReproducer Testcase: https://oss-fuzz.com/download/AMIfv94mWuwtSwDmR9L0tWtflElH6ll2Idjc33H36BGa26Xv6cu4XOH5S9VMcYVZZT7hHp-7pbkzIDMZBPzG8nD9lr1w9wSELF9r_H0-OR6CC6--guv8T29UgUd5C_A2KcuwnM_Jaz8wxSrvYf2ayMeZUkdTYx4w7etIvrwa8141af8vWLmt8kVO9Way2hQpHTDRZuwzKANpoL1E29L3LpKhhz_nnOMRHNQEvdpCt7kSUBD_xNRHsBrsd1rZYXluJS2waWV_SZJjT90uY9hTCBcQXjLsc5ArykU575-5s3MDrYaNKqhpdURygmcywwqBtLcDPZYmFjsZMtkeQ37eGhBnyVAdNkXk0uYbPpdhq0jMWCUpqgmmo8W9IEp1slWj0LqOc9lFnEAE?testcase_id=6203080456536064\n\n\nIssue filed automatically.\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nThis bug is subject to a 90 day disclosure deadline. If 90 days elapse\nwithout an upstream patch, then the bug report will automatically\nbecome visible to the public.",
                "descriptionNum": 1
            },
            {
                "projectName": "oss-fuzz",
                "localId": 1065,
                "sequenceNum": 1,
                "commenter": {
                    "userId": "382749006",
                    "displayName": "ClusterFuzz-External"
                },
                "timestamp": 1491648335,
                "amendments": [
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "OS-Linux"
                    }
                ]
            },
            {
                "projectName": "oss-fuzz",
                "localId": 1065,
                "sequenceNum": 2,
                "commenter": {
                    "userId": "382749006",
                    "displayName": "ClusterFuzz-External"
                },
                "timestamp": 1491721925,
                "content": "ClusterFuzz has detected this issue as fixed in range 201704071630:201704081630.\n\nDetailed report: https://oss-fuzz.com/testcase?key=6203080456536064\n\nProject: file\nFuzzer: libFuzzer_file_magic_fuzzer\nFuzz target binary: magic_fuzzer\nJob Type: libfuzzer_msan_file\nPlatform Id: linux\n\nCrash Type: Use-of-uninitialized-value\nCrash Address: \nCrash State:\n  match\n  file_softmagic\n  mget\n  \nSanitizer: memory (MSAN)\n\nRecommended Security Severity: Medium\n\nRegressed: https://oss-fuzz.com/revisions?job=libfuzzer_msan_file&range=201704041627:201704051628\nFixed: https://oss-fuzz.com/revisions?job=libfuzzer_msan_file&range=201704071630:201704081630\n\nReproducer Testcase: https://oss-fuzz.com/download/AMIfv94mWuwtSwDmR9L0tWtflElH6ll2Idjc33H36BGa26Xv6cu4XOH5S9VMcYVZZT7hHp-7pbkzIDMZBPzG8nD9lr1w9wSELF9r_H0-OR6CC6--guv8T29UgUd5C_A2KcuwnM_Jaz8wxSrvYf2ayMeZUkdTYx4w7etIvrwa8141af8vWLmt8kVO9Way2hQpHTDRZuwzKANpoL1E29L3LpKhhz_nnOMRHNQEvdpCt7kSUBD_xNRHsBrsd1rZYXluJS2waWV_SZJjT90uY9hTCBcQXjLsc5ArykU575-5s3MDrYaNKqhpdURygmcywwqBtLcDPZYmFjsZMtkeQ37eGhBnyVAdNkXk0uYbPpdhq0jMWCUpqgmmo8W9IEp1slWj0LqOc9lFnEAE?testcase_id=6203080456536064\n\n\nSee https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information.\n\nIf you suspect that the result above is incorrect, try re-doing that job on the test case report page."
            },
            {
                "projectName": "oss-fuzz",
                "localId": 1065,
                "sequenceNum": 3,
                "commenter": {
                    "userId": "382749006",
                    "displayName": "ClusterFuzz-External"
                },
                "timestamp": 1491727591,
                "content": "ClusterFuzz testcase 6203080456536064 is verified as fixed, so closing issue.\n\nIf this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.",
                "amendments": [
                    {
                        "fieldName": "Status",
                        "newOrDeltaValue": "Verified",
                        "oldValue": "New"
                    },
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "ClusterFuzz-Verified"
                    }
                ]
            },
            {
                "projectName": "oss-fuzz",
                "localId": 1065,
                "sequenceNum": 4,
                "commenter": {
                    "userId": "4164592774",
                    "displayName": "sheriffbot@chromium.org"
                },
                "timestamp": 1494335080,
                "content": "This bug has been fixed for 30 days. It has been opened to the public.\n\n- Your friendly Sheriffbot",
                "amendments": [
                    {
                        "fieldName": "Labels",
                        "newOrDeltaValue": "-restrict-view-commit"
                    }
                ]
            }
        ]
    },
    "fix_commit": "393dafa41b26a7d8ed593912e0ec1f1e7bd4e406",
    "repo_addr": "https://github.com/file/file.git"
}