Closed
Bug 1655002
Opened 5 years ago
Closed 5 years ago
AddressSanitizer: heap-use-after-free [@ rx::VertexBufferInterface::getBufferSize] with READ of size 8
Categories
(Core :: Graphics: CanvasWebGL, defect)
Tracking
()
RESOLVED
DUPLICATE
of bug 1519699
| Tracking | Status | |
|---|---|---|
| firefox78 | --- | affected |
People
(Reporter: decoder, Unassigned)
References
Details
(4 keywords)
Attachments
(1 file)
|
24.24 KB,
text/plain
|
Details |
The attached crash information was submitted via the ASan Nightly Reporter on mozilla-central-asan-nightly revision 78.0a1-20200518093924-https://hg.mozilla.org/mozilla-central/rev/8acda9da4ae71f0b6561cb2021bcb370e18ce80c.
For detailed crash information, see attachment.
| Reporter | ||
Comment 1•5 years ago
|
||
| Reporter | ||
Comment 2•5 years ago
|
||
This report was received from an older Firefox Version (Nightly 78), but we should check if this is still valid. I don't remember seeing this ever before.
Updated•5 years ago
|
Group: core-security → gfx-core-security
Updated•5 years ago
|
Keywords: csectype-uaf,
sec-high
Version: Trunk → 78 Branch
Comment 4•5 years ago
|
||
Looks a lot like https://bugzilla.mozilla.org/show_bug.cgi?id=1519699#c2
Flags: needinfo?(jgilbert)
See Also: → 1519699
Comment 5•5 years ago
|
||
Hey Jeff, This may be a dup of bug 1519699. I'll let you decide, but I want to at least move this one to the right component. Thanks!
Component: Graphics → Canvas: WebGL
Flags: needinfo?(jgilbert)
Updated•5 years ago
|
Status: NEW → RESOLVED
Closed: 5 years ago
Flags: needinfo?(jgilbert)
Resolution: --- → DUPLICATE
Updated•2 years ago
|
Group: gfx-core-security
You need to log in
before you can comment on or make changes to this bug.
Description
•