logo
DATABASE RESOURCES PRICING ABOUT US

harfbuzz: Use-of-uninitialized-value in OT::RangeRecord::cmp

Description

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=6595199411159040 Project: harfbuzz Fuzzer: libFuzzer_harfbuzz_hb-fuzzer Fuzz target binary: hb-fuzzer Job Type: libfuzzer_msan_harfbuzz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: OT::RangeRecord::cmp int OT::SortedArrayOf<OT::RangeRecord, OT::IntType<unsigned short, 2u> >::bsearc OT::CoverageFormat2::get_coverage Sanitizer: memory (MSAN) Recommended Security Severity: Medium Reproducer Testcase: https://oss-fuzz.com/download/AMIfv96VaG2QYpw6ejAsF2UFdQPClfC3pnd91dd1sXu0m838sgRzkftmAmZaRX5fqghAofmyKkBLslmZzW4r81QUPqOrBqQz8lR0SGzV-0nC-1CHSjQOtX4XxbL1a2x-qfIhoZo2bTOLn8Jh49x2cDYik0YtqA_9w7e0wn7EvGdH0w0dRG1S33LmMfuHW51Xm5rLthcKpAtq-zDqEzqu9wVdd9ywKIAYpXl-x14XiH1uFdpiFJGACQtNlzWJXR9wKvPy21aTLLAGhxzEluEPWnExsobMKyUnsakZAU2UM2E2Fba4VeJZCRd4rPmXl4YMnmJCdSb-29c3-HzYxdcAtbyw3YWBqsFZSugntInjkpIUs5QxRDTitKHKss8Orjb4C7NMBgY9vqB9?testcase_id=6595199411159040 Issue filed automatically. See https://github.com/google/oss-fuzz/blob/master/docs/reproducing.md for more information. This bug is subject to a 90 day disclosure deadline. If 90 days elapse without an upstream patch, then the bug report will automatically become visible to the public.


Affected Software


CPE Name Name Version
harfbuzz 1.7.1
harfbuzz 1.7.0
harfbuzz 1.6.3
harfbuzz 1.6.2
harfbuzz 1.6.1
harfbuzz 1.6.0
harfbuzz 1.5.1
harfbuzz 1.5.0
harfbuzz 1.4.8
harfbuzz 1.4.7
harfbuzz 1.4.6
harfbuzz 1.4.5
harfbuzz 1.4.4
harfbuzz 1.4.3
harfbuzz 1.4.2
harfbuzz 1.4.1
harfbuzz 1.4.0
harfbuzz 1.3.4
harfbuzz 1.3.3
harfbuzz 1.3.2
harfbuzz 1.3.1
harfbuzz 1.3.0
harfbuzz 1.2.7
harfbuzz 1.2.6
harfbuzz 1.2.5
harfbuzz 1.2.4
harfbuzz 1.2.3
harfbuzz 1.2.2
harfbuzz 1.2.1
harfbuzz 1.2.0
harfbuzz 1.1.3
harfbuzz 1.1.2
harfbuzz 1.1.1
harfbuzz 1.1.0
harfbuzz 1.0.6
harfbuzz 1.0.5
harfbuzz 1.0.4
harfbuzz 1.0.3
harfbuzz 1.0.2
harfbuzz 1.0.1
harfbuzz 1.0.0
harfbuzz 0.9.42
harfbuzz 0.9.41
harfbuzz 0.9.40
harfbuzz 0.9.39
harfbuzz 0.9.38
harfbuzz 0.9.37
harfbuzz 0.9.36
harfbuzz 0.9.35
harfbuzz 0.9.34
harfbuzz 0.9.33
harfbuzz 0.9.32
harfbuzz 0.9.31
harfbuzz 0.9.30
harfbuzz 0.9.29
harfbuzz 0.9.28
harfbuzz 0.9.27
harfbuzz 0.9.26
harfbuzz 0.9.25
harfbuzz 0.9.24
harfbuzz 0.9.23
harfbuzz 0.9.22
harfbuzz 0.9.21
harfbuzz 0.9.20
harfbuzz 0.9.19
harfbuzz 0.9.18
harfbuzz 0.9.17
harfbuzz 0.9.16
harfbuzz 0.9.15
harfbuzz 0.9.14
harfbuzz 0.9.13
harfbuzz 0.9.12
harfbuzz 0.9.11
harfbuzz 0.9.10
harfbuzz 0.9.9
harfbuzz 0.9.8
harfbuzz 0.9.7
harfbuzz 0.9.6
harfbuzz 0.9.5
harfbuzz 0.9.4
harfbuzz 0.9.3
harfbuzz 0.9.2
harfbuzz 0.9.1
harfbuzz 0.6.0