New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 603632 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Last visit > 30 days ago
Closed: Jun 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 2
Type: Bug



Sign in to add a comment

NO STACK

Project Member Reported by ClusterFuzz, Apr 14 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5475057958125568

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: Fatal error
Crash Address: 
Crash State:
  NULL
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=379564:379959

Minimized Testcase (0.46 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96bT5EJkJ0ZGyhAI-5coU5iq8SqIKbJUztDjPOUmLiDDJ21AwNfINeoMr2yDA6-MNfYmZoEZ1bkRgK62ysfDv0V9iPL4cSteeHc1o-hp-D2oP2VyR8BFMvSNjkRavfGb640wLnAIDjflS-Gk9SPW4nHDCCTXQ
function __f_85() {
  "use asm";
  function __f_64(__v_33, __v_35) {
    __v_33 = __v_33|0;
    __v_35 = __v_35|0;
    %OptimizeFunctionOnNextCall();
  }
  function __f_48(__v_33, __v_35) {
    __v_33 = __v_33|0;
    __v_35 = __v_35|0;
  }
  function __f_81(table_id, fun_id, arg1, arg2) {
    table_id = table_id|0;
    fun_id = fun_id|0;
    arg1 = arg1|0;
    arg2 = arg2|0;
  }
  return {__f_81:__f_81};
}
var module = Wasm.instantiateModuleFromAsm(__f_85.toString());


Filer: manoranjanr

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Labels: Te-Logged
Owner: titzer@chromium.org
Status: Assigned (was: Available)
Unreachable code in WASM reached. Could be a dupe of an existing issue.
Cc: titzer@chromium.org
Components: -Blink>JavaScript Blink>JavaScript>WebAssembly
Labels: -Pri-1 BlocksAsmWasmLaunch Pri-2
Owner: bradnelson@chromium.org
Project Member

Comment 4 by ClusterFuzz, Jun 28 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5475057958125568

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: Fatal error
Crash Address: 
Crash State:
  NULL

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94fNruycNYDr5NbBGkwLIHXk_YEBNhCatJJv6WhBE5rPh5gxWh020ZCsO0B9qwla0BS3fg_1pRABz59s4NFbnejJZpEKyLCp5WmSctbcvuJPyUhBrALD5vTRVyHwByD6EVH3PwZAz39YVEstK4B0cAgLnuPFp2sEIsOqa-kcgAlYOoMrg8?testcase_id=5475057958125568


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Status: WontFix (was: Assigned)
Marking 'WontFix' as per c#4.

Thank you!
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment