OSV-2020-1457 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19180 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv ComplexExprEvaluator::VisitBinaryOperator clang::StmtVisitorBase::Visit...

OSV-2020-1456 Segv on unknown address in clang::SourceManager::getFileIDLoaded

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19205 Crash type: Segv on unknown address Crash state: clang::SourceManager::getFileIDLoaded clang::SourceManager::isAtEndOfImmediateMacroExpansion clang::Lexer::isAtEndOfMacroExpansion...

OSV-2020-1452 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 12 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1445 Use-of-uninitialized-value in LibRaw::copy_bayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23712 Crash type: Use-of-uninitialized-value Crash state: LibRaw::copybayer LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1442 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19228 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data getDefaultInitValue EvaluateVarDecl...

OSV-2020-1440 Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014 Crash type: Use-of-uninitialized-value Crash state: PPrintText prvTidyPPrintTree prvTidyPPrintTree...

OSV-2020-1441 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21935 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1430 Segv on unknown address in clang::Parser::ParseCXXAmbiguousParenExpression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19617 Crash type: Segv on unknown address Crash state: clang::Parser::ParseCXXAmbiguousParenExpression clang::Parser::ParseParenExpression clang::Parser::ParseCastExpression...

OSV-2020-1426 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19132 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data clang::Sema::FinalizeVarWithDestructor clang::Sema::ActOnBlockStmtExpr...

OSV-2020-1432 Segv on unknown address in EvaluateObjectArgument

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19880 Crash type: Segv on unknown address Crash state: EvaluateObjectArgument ExprEvaluatorBase::handleCallExpr clang::StmtVisitorBase::Visit...

OSV-2020-1429 Segv on unknown address in clang::OverloadExpr::find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19972 Crash type: Segv on unknown address Crash state: clang::OverloadExpr::find clang::Sema::ResolveAndFixSingleFunctionTemplateSpecialization clang::Sema::CheckPlaceholderExpr...

OSV-2020-1421 Segv on unknown address in clang::FunctionProtoType::FunctionProtoType

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21119 Crash type: Segv on unknown address Crash state: clang::FunctionProtoType::FunctionProtoType clang::ASTContext::getFunctionTypeInternal GetFullTypeForDeclarator...

OSV-2020-1422 Segv on unknown address in llvm::APInt::trunc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21207 Crash type: Segv on unknown address Crash state: llvm::APInt::trunc AnalyzeBitFieldAssignment clang::InitializationSequence::Perform...

OSV-2020-1413 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19071 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity clang::Sema::SetMemberAccessSpecifier clang::Sema::ActOnTag...

OSV-2020-1416 Segv on unknown address in clang::Decl::AccessDeclContextSanity

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19117 Crash type: Segv on unknown address Crash state: clang::Decl::AccessDeclContextSanity LookupDirect clang::Sema::LookupQualifiedName...

OSV-2020-1412 Segv on unknown address in llvm::llvm_unreachable_internal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19317 Crash type: Segv on unknown address Crash state: llvm::llvmunreachableinternal clang::Sema::ActOnComment ActionCommentHandler::HandleComment...

OSV-2020-1408 Segv on unknown address in clang::Sema::LookupTemplateName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21152 Crash type: Segv on unknown address Crash state: clang::Sema::LookupTemplateName clang::Sema::isTemplateName clang::Parser::ParseOptionalCXXScopeSpecifier...

OSV-2020-1401 Use-of-uninitialized-value in LibRaw::parse_makernote_ADDRESS

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=16377 Crash type: Use-of-uninitialized-value Crash state: LibRaw::parsemakernoteADDRESS LibRaw::parsemakernoteADDRESS LibRaw::parsetiffifd...

OSV-2020-1404 Use-of-uninitialized-value in LosslessReduceDepthOK

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22581 Crash type: Use-of-uninitialized-value Crash state: LosslessReduceDepthOK ReadOneMNGImage ReadMNGImage...