New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 596492 link

Starred by 0 users

Issue metadata

Status: Duplicate
Merged: issue 596147
Owner:
Closed: Mar 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Crash in test_runner::TestPlugin::initialize

Project Member Reported by ClusterFuzz, Mar 21 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6678957088309248

Fuzzer: mbarbella_js_mutation_layout
Job Type: windows_syzyasan_content_shell
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000003
Crash State:
  test_runner::TestPlugin::initialize
  blink::FrameLoaderClientImpl::createPlugin
  blink::HTMLPlugInElement::loadPlugin
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_content_shell&range=381525:381877

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94LT87nLLwBrK49yX1uDJiQfWbwxbvRK5Kq47EEf2SBHN035ah_9xdOs7PJklF9nH98dxAUZ98mkhdGBNq7RP9vIy3DN7xWhGZ6dX18bFDCsYSAe_gADySl7rlcXY1ZsjOcGfgi7uiv-c2DqXCfzMmtdzFE9hZiZe8m8nz3Iejdinql31Q


Filer: ashejole

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Cc: ashej...@chromium.org
Labels: findit-for-crash M-51 Te-Logged
Owner: danakj@chromium.org
Status: Assigned (was: Available)
Suspected CLs	The result is a list of CLs that change the crashed files.

Author: danakj
Component: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/823b7378c01290d0a29e2052554d497e87530490
Time: Thu Mar 17 21:28:29 2016
Lines 178 of file test_plugin.cc which potentially caused crash are changed in this cl (frame #0, "content_shell!test_runner::TestPlugin::initialize+0x45").
Minimum distance from crash line to modified line: 0. (file: test_plugin.cc, crashed on: 178, modified: 178).

Suspected Component: chromium

@danakj: Hey, would you mind checking the above issue and see if it's related to your above change ?

Feel free to re-assign if that is not the case.

I really appreciate your help.

Thank you!

Comment 2 by danakj@chromium.org, Mar 21 2016

Mergedinto: 596147
Status: Duplicate (was: Assigned)
Should already be fixed on TOT?

Comment 3 by danakj@chromium.org, Mar 21 2016

Fixed in #382110, the fuzz report is before that.
Project Member

Comment 4 by ClusterFuzz, Mar 22 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6678957088309248

Fuzzer: mbarbella_js_mutation_layout
Job Type: windows_syzyasan_content_shell
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000003
Crash State:
  test_runner::TestPlugin::initialize
  blink::FrameLoaderClientImpl::createPlugin
  blink::HTMLPlugInElement::loadPlugin
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_content_shell&range=381525:381877

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94LT87nLLwBrK49yX1uDJiQfWbwxbvRK5Kq47EEf2SBHN035ah_9xdOs7PJklF9nH98dxAUZ98mkhdGBNq7RP9vIy3DN7xWhGZ6dX18bFDCsYSAe_gADySl7rlcXY1ZsjOcGfgi7uiv-c2DqXCfzMmtdzFE9hZiZe8m8nz3Iejdinql31Q


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Comment 5 by danakj@chromium.org, Mar 24 2016

Cc: danakj@chromium.org
 Issue 597626  has been merged into this issue.
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment