Data race in blink::WebCryptoResult::reset |
|||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4514821990514688 Fuzzer: inferno_twister Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race WRITE 8 Crash Address: 0x7d040001a7b0 Crash State: blink::WebCryptoResult::reset base::internal::PassedWrapper<std::__1::unique_ptr<webcrypto::GenerateKeyState, base::internal::BindState<base::internal::RunnableAdapter<void Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97NC2uThc-HdWU8PywUqBvOyjCuFYPZgH887gqbeiQqA_joD_4zJ6RI236ynn2pDPB2_o_DS8o31coQbmm_zapZKDmw7KJTCrNgC-m5ulDkyN6N3cfKB4bZg-1oJp55sA7G_sEEZx-ErwSXz-pFpN4SuQrh68nhAj2TwogLJQf9yac5JaE Filer: manoranjanr See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
May 13 2016
,
May 13 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/599c0724311759cb37ed1be9971fa694eee766ca commit 599c0724311759cb37ed1be9971fa694eee766ca Author: sigbjornf <sigbjornf@opera.com> Date: Fri May 13 09:19:37 2016 Avoid race on uninitializing CrossThreadPersistent nodes. R= BUG= 611593 , 611594 Review-Url: https://codereview.chromium.org/1974233002 Cr-Commit-Position: refs/heads/master@{#393488} [modify] https://crrev.com/599c0724311759cb37ed1be9971fa694eee766ca/third_party/WebKit/Source/platform/heap/Handle.h [modify] https://crrev.com/599c0724311759cb37ed1be9971fa694eee766ca/third_party/WebKit/Source/platform/heap/PersistentNode.h
,
May 13 2016
,
May 13 2016
ClusterFuzz has detected this issue as fixed in range 393466:393498. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4514821990514688 Fuzzer: inferno_twister Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race WRITE 8 Crash Address: 0x7d040001a7b0 Crash State: blink::WebCryptoResult::reset base::internal::PassedWrapper<std::__1::unique_ptr<webcrypto::GenerateKeyState, base::internal::BindState<base::internal::RunnableAdapter<void Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=393466:393498 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97NC2uThc-HdWU8PywUqBvOyjCuFYPZgH887gqbeiQqA_joD_4zJ6RI236ynn2pDPB2_o_DS8o31coQbmm_zapZKDmw7KJTCrNgC-m5ulDkyN6N3cfKB4bZg-1oJp55sA7G_sEEZx-ErwSXz-pFpN4SuQrh68nhAj2TwogLJQf9yac5JaE See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 18 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by manoranj...@chromium.org
, May 12 2016Labels: Te-Logged
Owner: sigbjo...@opera.com
Status: Assigned (was: Available)