New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 612096 link

Starred by 0 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Apr 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Data race in base::internal::WeakReferenceOwner::~WeakReferenceOwner

Project Member Reported by ClusterFuzz, May 16 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5401797983731712

Fuzzer: inferno_flicker
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race WRITE 1
Crash Address: 0x7d040001f595
Crash State:
  base::internal::WeakReferenceOwner::~WeakReferenceOwner
  media::FFmpegDemuxer::~FFmpegDemuxer
  media::FFmpegDemuxer::~FFmpegDemuxer
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=393765:393768

Minimized Testcase (10890.62 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94Wylb1eArNWGZuyl-OMHqArrlSlvdKaVkmgnSheg2HZ_m0ttuqZ02cRiNPaNdnnksZV19hOzdcuWjly1Gj5KD7Ch95pRkCCfHzMdF2Rc3PSy_7HhMpofCr8A2eWnC-6unPMG23EhrTA5Ib1R2V-7x6U8kUNlfWkhIw9h7g6d969hZD6iw

Filer: ranjitkan

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Cc: ranjitkan@chromium.org
Components: Tools>Test>FindIt>NoResult
Labels: -Type-Bug findit-wrong Te-Logged M-52 Type-Bug-Regression
Status: Assigned (was: Available)
Using code search suspecting #393038 could be the possible suspect

Review-Url: https://codereview.chromium.org/1965273003
Change log: https://chromium.googlesource.com/chromium/src/+/ba14a44957b4d3c7443bd60691ee78158e9f53ae

@gab: Assigning to you. Request you to please take a look into it. Please help us to reassign if not with respect to your change.
Project Member

Comment 2 by ClusterFuzz, May 16 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5401797983731712

Fuzzer: inferno_flicker
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race WRITE 1
Crash Address: 0x7d040001f595
Crash State:
  base::internal::WeakReferenceOwner::~WeakReferenceOwner
  media::FFmpegDemuxer::~FFmpegDemuxer
  media::FFmpegDemuxer::~FFmpegDemuxer
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=393765:393768

Minimized Testcase (10890.62 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94Wylb1eArNWGZuyl-OMHqArrlSlvdKaVkmgnSheg2HZ_m0ttuqZ02cRiNPaNdnnksZV19hOzdcuWjly1Gj5KD7Ch95pRkCCfHzMdF2Rc3PSy_7HhMpofCr8A2eWnC-6unPMG23EhrTA5Ib1R2V-7x6U8kUNlfWkhIw9h7g6d969hZD6iw

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 3 by sheriffbot@chromium.org, Jun 1 2016

Labels: -M-52 M-53 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 4 by sheriffbot@chromium.org, Jul 10 2016

Labels: -M-53 MovedFrom-53
This issue has been moved once and is lower than Pri-1. Removing the milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Components: -Tools>Test>FindIt>NoResult
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: manoranj...@chromium.org
Status: WontFix (was: Assigned)
As per comment#2, closing this issue.
Thank you.

Sign in to add a comment