Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

35980: jsoup:HtmlFuzzer: Timeout in HtmlFuzzer #1580

Closed
jhy opened this issue Jul 11, 2021 · 1 comment
Closed

35980: jsoup:HtmlFuzzer: Timeout in HtmlFuzzer #1580

jhy opened this issue Jul 11, 2021 · 1 comment
Labels
fixed fuzz An issue found by the OSS Fuzz project

Comments

@jhy
Copy link
Owner

jhy commented Jul 11, 2021

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35980&cursor=oss-fuzz%3A35941&q=label%3AProj-jsoup
Detailed Report: https://oss-fuzz.com/testcase?key=6422889254486016

Project: jsoup
Fuzzing Engine: libFuzzer
Fuzz Target: HtmlFuzzer
Job Type: libfuzzer_asan_jsoup
Platform Id: linux

Crash Type: Timeout (exceeds 60 secs)
Crash Address:
Crash State:
HtmlFuzzer

Sanitizer: address (ASAN)

@jhy jhy added the fuzz An issue found by the OSS Fuzz project label Jul 11, 2021
@jhy jhy closed this as completed in 6889036 Jul 11, 2021
@jhy jhy added the fixed label Jul 11, 2021
@jhy
Copy link
Owner Author

jhy commented Jul 15, 2021

Another issue effectively the name but in attribute names: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36150

Same fix applied. The other fields in Token for this pattern already use StringBuilders as there is a more frequent need to append repeatedly, vs eating all in one hit. So I hope that this addresses most of this pattern of slow parses from crafted HTML.

jhy added a commit that referenced this issue Jul 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
fixed fuzz An issue found by the OSS Fuzz project
Projects
None yet
Development

No branches or pull requests

1 participant