1926361 - Potential memory leak in WebM Fuzzer

Status: NEW

(Core :: Audio/Video, defect)

Description

[Jason Kratzer [:jkratzer]]

Attachment: testcase.zip

It appears that the WebM media fuzzer is affected by a memory leak. We are regularly seeing OOMs from this fuzzer and they can only be reproduced by running multiple entries from the corpus.

To reproduce the OOM, download and unpack the testcase to the /corpora/ directory.

$ fuzzfetch --fuzzing --asan --target firefox common gtest xpcshell -n libfuzzer
$ FUZZER=MediaWebM ./libfuzzer/firefox -- -close_fd_mask=3 -detect_leaks=1 -malloc_limit_mb=5120 -max_len=102400 -rss_limit_mb=3500 -timeout=10 ./corpora/*

Comment 1

[Jason Kratzer [:jkratzer]]

Attachment: crashlog.txt

Comment 2

[Bugmon [:jkratzer for issues]]

A pernosco session for this bug can be found here.

Comment 3

[Bugmon [:jkratzer for issues]]

A pernosco session for this bug can be found here.

Comment 4

[Jason Kratzer [:jkratzer]]

A pernosco session for this bug can be found here.

Comment 5

[Tyson Smith [:tsmith]]

This is impacting the performance of the fuzzer, please prioritize it appropriately.

Comment 6

[BugBot [:suhaib / :marco/ :calixte]]

This bug prevents fuzzing from making progress; however, it has low severity. It is important for fuzz blocker bugs to be addressed in a timely manner (see here why?).
:jimm, could you consider increasing the severity?

For more information, please visit BugBot documentation.