New issue
Advanced search Search tips

Issue 603757 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 603653
Owner: ----
Closed: Apr 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

RepresentationChangerError: node #81:Int64Constant of kRepWord64 (Internal) cann

Project Member Reported by ClusterFuzz, Apr 14 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5629912832016384

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_chrome_v8_d8
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  RepresentationChangerError: node #81:Int64Constant of kRepWord64 (Internal) cann
  
Regressed: V8: r35473:35499

Minimized Testcase (0.34 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94fNMPZAK3DFK9E2cURYp444n8KYHRQ0fsPwlJGHMB_Gbuknbu77wVmizrX-O0_ltLtUd_SGnGkhHNm5kZKozjuIZqBMM8XG1fCHN1Qc1mi5fEufObDf_e6vIT7rBsIg_8ff9V7vSBbO1qVdYfU7Jx4uPRy6Q
(function __f_7() {
})();
(function __f_69() {
  var __v_69 = 0;
  function __f_70(a) {
    var __v_68 = a + 23
    try {
      let __v_19 = a + 42;
      function __f_68() { return __v_68 + __v_67 }
      throw "boom!";
    } catch(e) {
      __v_69 = __v_68;
    }
    return __v_68;
  }
  %OptimizeFunctionOnNextCall(__f_70);
 __f_70();
})();


Filer: manoranjanr

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Labels: Te-Logged
Mergedinto: 603653
Status: Duplicate (was: Available)
Project Member

Comment 3 by ClusterFuzz, Apr 15 2016

ClusterFuzz has detected this issue as fixed in range 35512:35539.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5629912832016384

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_chrome_v8_d8
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  RepresentationChangerError: node #81:Int64Constant of kRepWord64 (Internal) cann
  
Regressed: V8: r35473:35499
Fixed: V8: r35512:35539

Minimized Testcase (0.34 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94fNMPZAK3DFK9E2cURYp444n8KYHRQ0fsPwlJGHMB_Gbuknbu77wVmizrX-O0_ltLtUd_SGnGkhHNm5kZKozjuIZqBMM8XG1fCHN1Qc1mi5fEufObDf_e6vIT7rBsIg_8ff9V7vSBbO1qVdYfU7Jx4uPRy6Q
(function __f_7() {
})();
(function __f_69() {
  var __v_69 = 0;
  function __f_70(a) {
    var __v_68 = a + 23
    try {
      let __v_19 = a + 42;
      function __f_68() { return __v_68 + __v_67 }
      throw "boom!";
    } catch(e) {
      __v_69 = __v_68;
    }
    return __v_68;
  }
  %OptimizeFunctionOnNextCall(__f_70);
 __f_70();
})();


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment