libreoffice:schtmlfuzzer: Bad-cast to ScExternalDoubleRefToken from ScExternalSingleRefToken in extendRangeReference

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5606773552906240 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libreoffice:schtmlfuzzer: Heap-use-after-free in ScHTMLLayoutParser::Colonize

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=4688459487838208 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash...

libreoffice:schtmlfuzzer: Heap-use-after-free in ScHTMLLayoutParser::SetWidths

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5537929171632128 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: schtmlfuzzer Job Type: libfuzzerasanlibreoffice Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash...