JustifyCenter command crashes with TR element w/o TABLE element |
|||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5075212801933312 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN Crash Address: 0x00000008 Crash State: blink::CompositeEditCommand::isRemovableBlock blink::DeleteSelectionCommand::removeRedundantBlocks blink::DeleteSelectionCommand::doApply Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=275694:275720 Minimized Testcase (2.57 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96nbr41yWayczd4Xshzxe9zVNR06KdugrEakZuzBfHqAEx1WzTxLP0W42ZwSk8Y4t-i-USAFf481cKKoE6oPO6h-jJmuxOZQ2wTlIy0kINoq0X_JLigrmMqqqDgHWjXvchiU1xORCqQaKz_xuM08qD_AuSnsw Filer: ajha See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Mar 17 2016
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5203487016615936 Fuzzer: inferno_layout_test_unmodified Job Type: linux_lsan_chrome_mp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000010 Crash State: blink::CompositeEditCommand::isRemovableBlock blink::DeleteSelectionCommand::removeRedundantBlocks blink::DeleteSelectionCommand::doApply Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=209699:209703 Minimized Testcase (2.57 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96WuFjhRJlPnvLPGo_3XIi57QKEqvJWv3Q_53nwV9YgnBVHHrfn6Eboxk6z_uDW_o1ulz6dkS8ckVOMCN_nvpGWIZOI94PutY_bHOTV4dNzvGr1lHUx4PUtgqlN6PQq0E0P9GSF4eCf80_O1r_NcAzGiLU0Jw Filer: manoranjanr See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Mar 17 2016
Remove Cr-* labels, replace w/ component
,
Mar 22 2016
,
Mar 22 2016
,
Jun 28 2016
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6611520859668480 Fuzzer: inferno_layout_test_unmodified Job Type: windows_syzyasan_content_shell Platform Id: windows Crash Type: UNKNOWN Crash Address: 0x0000000b Crash State: blink::CompositeEditCommand::isRemovableBlock blink::DeleteSelectionCommand::removeRedundantBlocks blink::DeleteSelectionCommand::doApply Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_content_shell&range=402309:402316 Minimized Testcase (2.63 Kb): https://cluster-fuzz.appspot.com/download/AMIfv970EbaNR-7k9y3-P4q2xs_1DFMSrgtsnuTcpudBNzAooCaDMHQ7vn6UPcunRmFDwJkjmDY-JK-7xoSJKL1CF96YFb_yRX8_ewEuBYgCGZWLI8HdZmIbJmvnXSkjqtH9x9gh_OwhJsopS-UXZ45ja_wzpTbMaw?testcase_id=6611520859668480 Filer: tkonchada See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Nov 24 2016
Unable to find the possible suspect using Find it and CL. Assigning to the concern owner from Code Search using the file "compositeeditcommand.cpp". Suspecting the CL -- https://chromium.googlesource.com/chromium/src/+/ea062aa9a0f814b1ba88bbe3151e057e5aba60e8 @yoichio -- Could you please look into the issuem kindly re-assign if this is not related to your change. Thank You.
,
Dec 23 2016
ClusterFuzz has detected this issue as fixed in range 440451:440490. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5075212801933312 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000008 Crash State: blink::CompositeEditCommand::isRemovableBlock blink::DeleteSelectionCommand::removeRedundantBlocks blink::DeleteSelectionCommand::doApply Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=275694:275720 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=440451:440490 Minimized Testcase (2.65 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95YPXF0lq7AqKnD6zOZeDa0GMCW3D_mRSFcs1Fxr9KpI1Cq4lPC8fVYjv8k6lQrO1-FfG3DM7MOGLlyPZo047fr5OmPUuyQNmlUXUcXxD06KLzs4tv6FQYfAYpbaPeFfmLVwOFWw_a8JonCKooSSH4KJcDJ5Q?testcase_id=5075212801933312 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Dec 27 2016
Marking 'Fixed' as per c#9. Thank you! |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by ajha@chromium.org
, Mar 15 2016Owner: yosin@chromium.org
Status: Assigned (was: Available)