Kaydet (Commit) 6f53409e authored tarafından Caolán McNamara's avatar Caolán McNamara

ofz: libFuzzer: out-of-memory

from "unstable" log file https://oss-fuzz-build-logs.storage.googleapis.com/build_logs/libreoffice/latest.txt

 #5 0x617248 in operator new[](unsigned long) /src/llvm/projects/compiler-rt/lib/asan/asan_new_delete.cc:84
 #6 0x710843 in MetaCommentAction::Read(SvStream&, ImplMetaReadData*) /src/libreoffice/vcl/source/gdi/metaact.cxx:3363:18
 #7 0x6e1921 in MetaAction::ReadMetaAction(SvStream&, ImplMetaReadData*) /src/libreoffice/vcl/source/gdi/metaact.cxx:266:18

Change-Id: I518adea27565d1fbe91c8817f41850deb0ba9877
üst 273823de
......@@ -3354,6 +3354,13 @@ void MetaCommentAction::Read( SvStream& rIStm, ImplMetaReadData* )
maComment = read_uInt16_lenPrefixed_uInt8s_ToOString(rIStm);
rIStm.ReadInt32( mnValue ).ReadUInt32( mnDataSize );
if (mnDataSize > rIStm.remainingSize())
{
SAL_WARN("vcl.gdi", "Parsing error: " << rIStm.remainingSize() <<
" available data, but " << mnDataSize << " claimed, truncating");
mnDataSize = rIStm.remainingSize();
}
SAL_INFO("vcl.gdi", "MetaCommentAction::Read " << maComment);
delete[] mpData;
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment