I have been able to make Google Chrome crash, and I was wondering if there are tools or heuristics to determine whether or not the crash is a security vulnerability.
How can I determine if a Chrome crash is also a security vulnerability?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
I suggest reading Best way to triage crashes found via fuzzing, on Linux?, which describes exactly how to do a first-pass triage at assessing the likelihood that the crash is also a security problem. Tools like !exploitable and Valgrind memcheck are your friend.
If it passes the first-level check, the next step is probably to report it to the Chrome folks and let them evaluate it in greater detail.
Perhaps this post may help you, http://blog.chromium.org/2012/04/fuzzing-for-security.html. In particular, check out Address Sanitizer. Anyways, you need to analyze the crash file which is in various locations depending on distro. Have fun.