New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 604334 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jun 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

ASSERT_NOT_REACHED in blink::ResourceFetcher::removeResourceLoader

Project Member Reported by ClusterFuzz, Apr 18 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4812321381154816

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT_NOT_REACHED
Crash Address: 
Crash State:
  blink::ResourceFetcher::removeResourceLoader
  blink::ResourceLoader::didFinishLoadingOnePart
  blink::ResourceLoader::didFinishLoading
  

Minimized Testcase (0.62 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96xPc4WAinz4Q11EQRDiEH7ZsF-aQ-DMVVu3_B498gQ4-LcPolA7aqRu3og-cPRzmvlC7pJFviNTeV6EFJ-3hd0RRURefvoR2sz0hEepP7sZByUY_zSabJilNKCjxJXWH2MfYtN99QfEXYhCM-Fo_M4OBtXcA

Filer: ssamanoori

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Components: Blink>Loader
Labels: findit-for-crash Te-Logged M-50
Owner: japhet@chromium.org
Status: Assigned (was: Available)
	Regression information is not available. The result is the blame information.

Author: japhet@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/cb7aaaa446f3a1ab3b1e40cbd0a32c15915a545f
Time: Mon Dec 08 20:58:16 2014
The CL last changed line 984 of file ResourceFetcher.cpp, which is stack frame 0.

Author: hiroshige
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/22822feaf74bffc00dbe6db27cd3e36c1c568e11
Time: Fri Mar 18 02:51:55 2016
The CL last changed line 133 of file ResourceLoader.cpp, which is stack frame 1.

Author: eustas@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/11ce2fe190cc5153e6f62ca3640d61bd24df3d84
Time: Tue Feb 11 09:25:16 2014
The CL last changed line 334 of file ResourceLoader.cpp, which is stack frame 2.

Author: yhirano
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/69175410460ac676304dbba52a2decc76adf0403
Time: Mon Jun 15 11:17:02 2015
The CL last changed line 757 of file web_url_loader_impl.cc, which is stack frame 3.

Author: kinuko
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/ccbf2c957e8f11cb640b653459e252c584a11901
Time: Wed Feb 03 22:54:37 2016
The CL last changed line 903 of file web_url_loader_impl.cc, which is stack frame 4.

Author: yhirano
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/304d20954b50382395b4ed702e8571f6da71b0f6
Time: Fri Oct 23 15:21:38 2015
The CL last changed line 376 of file resource_dispatcher.cc, which is stack frame 5.

Author: tzik
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/463eb426b5621e116c2025e279e204cc483a7e29
Time: Tue Feb 16 15:04:09 2016
The CL last changed line 166 of file tuple.h, which is stack frame 6.

Suspected Project: chromium
Suspected Component: Blink>Loader
=====================================
Above is the only CL from findit and the changes made to file "ResourceFetcher.cpp" from the frame #0 is more related to it. 

japhet@ :Could you please look into this issue if it is related to your change,else please route this issue to an appropriate dev person.

Thanks,
Project Member

Comment 2 by ClusterFuzz, Jun 9 2016

ClusterFuzz has detected this issue as fixed in range 392043:392265.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4812321381154816

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT_NOT_REACHED
Crash Address: 
Crash State:
  blink::ResourceFetcher::removeResourceLoader
  blink::ResourceLoader::didFinishLoadingOnePart
  blink::ResourceLoader::didFinishLoading
  
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=392043:392265

Minimized Testcase (0.62 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94PnTPLBGTMxQ1U_n-2pC-BHmePz_0EbWEHfMgTU4_cquhFa4N23gBFMaFeEysMowGnRWL4yQf4lqy7cCh3dKEkRItXB-uUzNtnU9l-85GxDJP9zxNAO5DlxSIZ0x-NoR_FX8vLu6pMQXkjcHcm2917KCXjdQ

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 3 by ClusterFuzz, Jun 14 2016

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment