Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue 24468 in oss-fuzz: assimp:assimp_fuzzer: Direct-leak in Assimp::Intern::AllocateFromAssimpHeap::operator new #3416

Closed
kimkulling opened this issue Oct 6, 2020 · 0 comments · Fixed by #4943
Labels
Bug Global flag to mark a deviation from expected behaviour Fuzzer Bugs found by a fuzzer

Comments

@kimkulling
Copy link
Member

Describe the bug
New issue 24468 by ClusterFuzz-External: assimp:assimp_fuzzer: Direct-leak in Assimp::Intern::AllocateFromAssimpHeap::operator new
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24468

To Reproduce
Detailed Report: https://oss-fuzz.com/testcase?key=5101356134957056

Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer
Job Type: libfuzzer_asan_assimp
Platform Id: linux

Crash Type: Direct-leak
Crash Address:
Crash State:
Assimp::Intern::AllocateFromAssimpHeap::operator new
Assimp::MemoryIOSystem::Open
Assimp::FileSystemFilter::Open

Sanitizer: address (ASAN)

Crash Revision: https://oss-fuzz.com/revisions?job=libfuzzer_asan_assimp&revision=202007290504

Reproducer Testcase: https://oss-fuzz.com/download?testcase_id=5101356134957056

Issue filed automatically.

See https://google.github.io/oss-fuzz/advanced-topics/reproducing for instructions to reproduce this bug locally.
When you fix this bug, please

  • mention the fix revision(s).
  • state whether the bug was a short-lived regression or an old bug in any stable releases.
  • add any other useful information.
    This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at https://github.com/google/oss-fuzz/issues. Comments on individual Monorail issues are not monitored.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.

Expected behavior
Fix the crash

Desktop (please complete the following information):

  • Linux
@kimkulling kimkulling added Bug Global flag to mark a deviation from expected behaviour Fuzzer Bugs found by a fuzzer labels Oct 6, 2020
@kimkulling kimkulling added this to In progress in Planning for Release V5.1 Feb 17, 2021
@kimkulling kimkulling moved this from In progress to ToDo in Planning for Release V5.1 Feb 17, 2021
kimkulling added a commit that referenced this issue Feb 2, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug Global flag to mark a deviation from expected behaviour Fuzzer Bugs found by a fuzzer
Projects
Development

Successfully merging a pull request may close this issue.

1 participant