New issue
Advanced search Search tips

Issue 599719 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Apr 2016
Cc:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

result == fixed_size_from_fp + (stack_slots * kPointerSize) - CommonFrameConstan

Project Member Reported by ClusterFuzz, Mar 31 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5856394581901312

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  result == fixed_size_from_fp + (stack_slots * kPointerSize) - CommonFrameConstan
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=379564:379959

Minimized Testcase (0.39 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96VePo_cxKl7Uz8im9UoVhW9MwkUpg6GUipSQ14nAZHRYbT2dmoJTcpnHlnwu79SjA7S0DC5hhEgSKUGcb7fZuzagulVdZBjXUqsvCQNhY2cju7xLFcz-55lGsG8SdqtTKeooSdtquV_SkD9TzKpYWnyNNTzA
  function __f_7() {
    %DeoptimizeFunction(__f_5);
  }
  function __f_8(global, env) {
    "use asm";
    var __f_7 = env.__f_7;
    function __f_9(i4, i5) {
      i4 = i4 | 0;
      i5 = i5 | 0;
      __f_7();
    }
    return {'__f_9': __f_9}
  }
  function __f_5() {
    var __v_5 = Wasm.instantiateModuleFromAsm( __f_8.toString(), {'__f_7': __f_7});
    __v_5.__f_9(0, 0, 0);
  }
  __f_5();


Filer: manoranjanr

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Labels: Te-Logged
Project Member

Comment 2 by ClusterFuzz, Apr 1 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5856394581901312

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  result == fixed_size_from_fp + (stack_slots * kPointerSize) - CommonFrameConstan
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=379564:379959

Minimized Testcase (0.39 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96VePo_cxKl7Uz8im9UoVhW9MwkUpg6GUipSQ14nAZHRYbT2dmoJTcpnHlnwu79SjA7S0DC5hhEgSKUGcb7fZuzagulVdZBjXUqsvCQNhY2cju7xLFcz-55lGsG8SdqtTKeooSdtquV_SkD9TzKpYWnyNNTzA
  function __f_7() {
    %DeoptimizeFunction(__f_5);
  }
  function __f_8(global, env) {
    "use asm";
    var __f_7 = env.__f_7;
    function __f_9(i4, i5) {
      i4 = i4 | 0;
      i5 = i5 | 0;
      __f_7();
    }
    return {'__f_9': __f_9}
  }
  function __f_5() {
    var __v_5 = Wasm.instantiateModuleFromAsm( __f_8.toString(), {'__f_7': __f_7});
    __v_5.__f_9(0, 0, 0);
  }
  __f_5();


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Owner: titzer@chromium.org
Status: Assigned (was: Available)
Status: Fixed (was: Assigned)
Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment