skia-ftz:skp: Use-of-uninitialized-value in SkSL::stod

Detailed Report: https://oss-fuzz.com/testcase?key=5112924124282880 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: skp Job Type: libfuzzermsanskia-ftz Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkSL::stod SkSL::Parser::floatLiteral...

skia:skmeshspecification: Heap-use-after-free in SkSL::Compiler::handleError

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=4898008471568384 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skmeshspecification Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address:...

skia-ftz:sksl2pipeline: Use-after-poison in SkSL::PipelineStage::PipelineStageCodeGenerator::writeVariableReference

Detailed Report: https://oss-fuzz.com/testcase?key=4664590771552256 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000001088 Crash State:...

skia:skruntimeeffect: Index-out-of-bounds in SkSL::check_parameters

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5697076401930240 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerubsanskia Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5297323484774400 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000918...

OSV-2021-503 Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31765 Crash type: Use-after-poison READ 8 Crash state: std::1::uniqueptrSkSL::Expression, std::1::defaultdeleteSkSL::Expression SkSL::DefinitionMap::getKnownDefinition SkSL::VariableReference::constantPropagate...

PT-2021-28147

Name of the Vulnerable Software and Affected Versions Skia affected versions not specified Description The issue is related to a crash caused by a use-after-poison READ 8 error. It involves the SkSL::Expression and SkSL::DefinitionMap::getKnownDefinition function, as well as the...

skia:sksl2pipeline: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5733737603137536 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: sksl2pipeline Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000ae8...

skia:skruntimeeffect: Use-after-poison in SkSL::Variable::initialValue

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6239565562118144 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000978...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5861187977871360 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000978...

skia:sksl2pipeline: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6373306154483712 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: sksl2pipeline Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000eb8...

skia:sksl2pipeline: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5698558672109568 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2pipeline Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x6310000009b8...

skia:sksl2glsl: Use-of-uninitialized-value in SkSL::ASTNode::iterator::operator++

Detailed Report: https://oss-fuzz.com/testcase?key=4998916535877632 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2glsl Job Type: libfuzzermsanskia Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: SkSL::ASTNode::iterator::operator++...

skia:sksl2spirv: Heap-use-after-free in SkSL::ASTNode::getModifiers

Detailed Report: https://oss-fuzz.com/testcase?key=5641004919160832 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: sksl2spirv Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-use-after-free READ Crash Address: 0x613000031318 Crash State: SkSL::ASTNode::getModifiers...

skia:skruntimeeffect: Use-after-poison in SkSL::Type::isScalar

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=6485633413545984 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x631000014bb0...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5107427169140736 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000005278...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Detailed Report: https://oss-fuzz.com/testcase?key=5137902589837312 Project: skia Fuzzing Engine: afl Fuzz Target: skruntimeeffect Job Type: aflasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x6310000009d8 Crash State: std::1::uniqueptrSkSL::Expression,...

skia:skruntimeeffect: Use-after-poison in SkTArray<std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::E

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5744111596470272 Project: skia Fuzzing Engine: honggfuzz Fuzz Target: skruntimeeffect Job Type: honggfuzzasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000bb8...

skia:skruntimeeffect: Use-after-poison in std::__1::unique_ptr<SkSL::Expression, std::__1::default_delete<SkSL::Expression

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5114195066617856 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 8 Crash Address: 0x631000000e78...

skia:skruntimeeffect: Use-after-poison in SkSL::Type::columns

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5082530600189952 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: skruntimeeffect Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Use-after-poison READ 4 Crash Address: 0x631000014be0...