OSV-2020-1473 Segv on unknown address in LValue::addUnsizedArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19704 Crash type: Segv on unknown address Crash state: LValue::addUnsizedArray PointerExprEvaluator::VisitCastExpr clang::StmtVisitorBase::Visit...

OSV-2020-1476 Heap-buffer-overflow in read_uleb128

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 1 Crash state: readuleb128 dexparse dexload...

OSV-2020-1469 Segv on unknown address in clang::Sema::ActOnTag

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19182 Crash type: Segv on unknown address Crash state: clang::Sema::ActOnTag clang::Parser::ParseEnumSpecifier clang::Parser::ParseDeclarationSpecifiers...

OSV-2020-1465 Segv on unknown address in clang::Parser::parseObjCTypeArgsAndProtocolQualifiers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23785 Crash type: Segv on unknown address Crash state: clang::Parser::parseObjCTypeArgsAndProtocolQualifiers clang::Parser::parseObjCTypeArgsAndProtocolQualifiers clang::Parser::TryAnnotateTypeOrScopeTokenAfterScopeSpec...

OSV-2020-1464 Heap-buffer-overflow in dotnet_parse_com

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=8901 Crash type: Heap-buffer-overflow READ 12 Crash state: dotnetparsecom dotnetload yrmodulesload...

OSV-2020-1467 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19272 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv llvm::APInt::sdiv ComplexExprEvaluator::VisitBinaryOperator...

OSV-2020-1462 Segv on unknown address in clang::Sema::SetCtorInitializers

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19136 Crash type: Segv on unknown address Crash state: clang::Sema::SetCtorInitializers clang::Sema::DefineImplicitDefaultConstructor clang::Sema::runWithSufficientStackSpace...

OSV-2020-1461 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 6 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1459 Segv on unknown address in clang::Sema::LookupQualifiedName

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19181 Crash type: Segv on unknown address Crash state: clang::Sema::LookupQualifiedName clang::Sema::CppLookupName clang::Sema::LookupName...

OSV-2020-1453 UNKNOWN READ in RDKit::labelRecursivePatterns

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24352 Crash type: UNKNOWN READ Crash state: RDKit::labelRecursivePatterns RDKit::SmartsToMol RDKit::ParseMarvinSmartsLine...

OSV-2020-1455 Segv on unknown address in clang::Parser::ParseObjCInterfaceDeclList

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19088 Crash type: Segv on unknown address Crash state: clang::Parser::ParseObjCInterfaceDeclList clang::Parser::ParseObjCAtInterfaceDeclaration clang::Parser::ParseObjCAtDirectives...

OSV-2020-1457 Segv on unknown address in llvm::APInt::udiv

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19180 Crash type: Segv on unknown address Crash state: llvm::APInt::udiv ComplexExprEvaluator::VisitBinaryOperator clang::StmtVisitorBase::Visit...

OSV-2020-1456 Segv on unknown address in clang::SourceManager::getFileIDLoaded

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19205 Crash type: Segv on unknown address Crash state: clang::SourceManager::getFileIDLoaded clang::SourceManager::isAtEndOfImmediateMacroExpansion clang::Lexer::isAtEndOfMacroExpansion...

OSV-2020-1452 Heap-buffer-overflow in yr_object_set_string

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=6402 Crash type: Heap-buffer-overflow READ 12 Crash state: yrobjectsetstring dexparse dexload...

OSV-2020-1445 Use-of-uninitialized-value in LibRaw::copy_bayer

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23712 Crash type: Use-of-uninitialized-value Crash state: LibRaw::copybayer LibRaw::raw2imageex LibRaw::dcrawprocess...

OSV-2020-1444 Heap-buffer-overflow in void mc_chroma<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=22678 Crash type: Heap-buffer-overflow READ 2 Crash state: void mcchroma generateinterpredictionsamples decodepredictionunit...

OSV-2020-1442 Segv on unknown address in clang::CXXRecordDecl::data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19228 Crash type: Segv on unknown address Crash state: clang::CXXRecordDecl::data getDefaultInitValue EvaluateVarDecl...

OSV-2020-1441 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=21935 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

OSV-2020-1440 Use-of-uninitialized-value in PPrintText

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13014 Crash type: Use-of-uninitialized-value Crash state: PPrintText prvTidyPPrintTree prvTidyPPrintTree...

OSV-2020-1429 Segv on unknown address in clang::OverloadExpr::find

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19972 Crash type: Segv on unknown address Crash state: clang::OverloadExpr::find clang::Sema::ResolveAndFixSingleFunctionTemplateSpecialization clang::Sema::CheckPlaceholderExpr...