Closed Bug 1209365 Opened 5 years ago Closed 5 years ago

MSan: use-of-uninitialized-value in ReadSymbol (decode.c:120)

Categories

(Core :: Layout: Text and Fonts, defect)

41 Branch
defect
Not set
critical

Tracking

()

RESOLVED FIXED
Tracking Status
firefox41 --- wontfix
firefox42 --- wontfix
firefox43 --- wontfix
firefox44 --- fixed
firefox-esr38 --- unaffected

People

(Reporter: tsmith, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: csectype-uninitialized, sec-low, Whiteboard: [adv-main44+])

Attachments

(2 files)

Attached file call_stack.txt
Not sure which component this should go under so I copied bug 366559 for now.

I am fuzzing commit https://github.com/google/brotli/commit/ca29aa22c295daac15baf5d85427ecc7808b515c

This is the version of brotli currently shipping in Firefox (https://hg.mozilla.org/mozilla-central/log/tip/modules/brotli/dec/decode.c).

It is currently used in WOFF2.
Attached file test_case.compressed
Summary: MSan: use-of-uninitialized-value ReadSymbol → MSan: use-of-uninitialized-value in ReadSymbol (decode.c:120)
Component: Networking: HTTP → Layout: Text
Group: network-core-security → layout-core-security
per https://bugzilla.mozilla.org/show_bug.cgi?id=1207298#c12 we are going to let the brotli library update ride the trains from 44 onwards unless we learn of more severe problems..

bug 1207298 checked in a library update and will also resolve this issue.
Status: NEW → RESOLVED
Closed: 5 years ago
Resolution: --- → FIXED
Group: layout-core-security → core-security-release
Keywords: sec-low
Whiteboard: [adv-main44-] → [adv-main44+]
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.