New issue
Advanced search Search tips

Issue 611610 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner: ----
Closed: Dec 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

CHECK failed: isStartOfParagraph(startOfParagraphToMove). #text "\n xxx xxx xx

Project Member Reported by ClusterFuzz, May 12 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5556283947614208

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  CHECK failed: isStartOfParagraph(startOfParagraphToMove). #text "\n   xxx xxx xx
  blink::CompositeEditCommand::moveParagraph
  blink::IndentOutdentCommand::outdentParagraph
  

Minimized Testcase (0.41 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96uV5qpY3mn9H6oOus8erFun4-PDEBBZS9bJ1o7GcuUZaSZ0Z5sS0QHha-flM-fpbPARaH06qqFExXN_miEhxIAObErAZ2-oHYbnOPc_w8layxZysWfNl1Baxy_IEbgNhNqJ8zirrplnS5fDyKjoOcCpcAOwg
<div>
   </div>
  <div id="mc"</div>
   xxx xxx xxx xxx xxx xxx xxx xxx xxx
  <style>
   * {
    visibility: visible;
}
*:only-of-type {
    visibility: collapse;
  </style>
  <script>
onload = function() {
    document.designMode = 'on';
    var __v_120 = document.querySelector('blockquote');
    getSelection().collapse(__v_120, 2);
    document.execCommand('Outdent');
};
</script>
  <blockquote>
   <table>
     <table>


Filer: manoranjanr

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Components: Tools>Test>FindIt>NoResult Blink
Labels: Te-Logged
Owner: koten...@yandex-team.ru
Status: Assigned (was: Available)
kotenkov@, could you please look into this change (https://chromium.googlesource.com/chromium/src/+/4021ae18b9410d496adc92077e00672253f3876d%5E%21/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp) if possible?

Thank you!
Components: -Blink Blink>Editing
Owner: yosin@chromium.org

Comment 4 by yosin@chromium.org, Jun 10 2016

Components: Blink>Editing>Command
Labels: -Pri-1 Pri-2
Owner: ----
Status: Available (was: Assigned)
Lower to Pri-2, real world usage of Outdent command is low.
Project Member

Comment 5 by ClusterFuzz, Jul 7 2016

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6335918143438848

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  isStartOfParagraph(startOfParagraphToMove). #text "\n   this should be red\n  "@
  blink::CompositeEditCommand::moveParagraph
  blink::IndentOutdentCommand::outdentParagraph
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=268656:269696

Minimized Testcase (0.37 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94Pplq_BnlLA2Er_-Z8i2gAbAyL46siFxAnddCTMxvN5jsTq8a3PZK85yexn2ayfEM2XPNgy4OUn64CQtxSpqqgiEvGMTYP700JNeMa_1E1gdsd8pzrweccdphoINasVtJgAcKGgWVNAtMtadeOwS3IAP4fSg?testcase_id=6335918143438848
<p>
   this should be red
  <p>
  <style>
   * {
    visibility: visible;
}
*:only-of-type {
    visibility: collapse;
  </style>
  <script>
onload = function() {
    document.designMode = 'on';
    var __v_106 = document.querySelector('blockquote');
    getSelection().collapse(__v_106, 2);
    document.execCommand('Outdent');
};
  </script>
  <blockquote>
   <table>
   <table>


Filer: mummareddy

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Components: -Tools>Test>FindIt>NoResult
Project Member

Comment 7 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 8 by ClusterFuzz, Dec 22 2016

Status: WontFix (was: Available)
ClusterFuzz testcase 5556283947614208 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment