skia-ftz:api_draw_functions: Heap-buffer-overflow in SkRgnBuilder::blitH

Detailed Report: https://oss-fuzz.com/testcase?key=5089142431940608 Project: skia-ftz Fuzzing Engine: honggfuzz Fuzz Target: apidrawfunctions Job Type: honggfuzzasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x611000000130 Crash State: SkRgnBuilder::blitH...

skia:api_draw_functions: Heap-buffer-overflow in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5292529202626560 Project: skia Fuzzing Engine: afl Fuzz Target: apidrawfunctions Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address: 0x6080000000f8 Crash...

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with...

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with an affine transform and used as a clipping region for drawing...

skia/region_set_path: Crash in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5687858401116160 Project: skia Fuzzer: libFuzzerskiaregionsetpath Fuzz target binary: regionsetpath Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...