Crash in v8::internal::wasm::WasmLinker::LinkFunction |
|||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6202746537771008 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::internal::wasm::WasmLinker::LinkFunction v8::internal::wasm::WasmLinker::Link v8::internal::wasm::WasmModule::Instantiate Regressed: V8: r36371:36372 Minimized Testcase (0.26 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv958aDDLvDpNtCzgvMnyKAsNriID1gthbNH4koYSQYdmgf3u9qKmTvD2Denj82xOqKkwHwfMb_gIFl1lIwysGp3Dj56pwzQXaJswzaXBJ9dSjMD3aqqQEjm-pkcEqBB_R5iliq8fcFKkJmEFCMcSlXrSUI7F9Q function __f_0() { } function __f_3(){ 'use asm'; function __f_5() { __v_13 = __v_4; var __v_13 = 1, __v_14 = 0; var __v_3 = 0, __v_4 = 0 } return { __f_5: __f_5 }; } var __v_11 = Wasm.instantiateModuleFromAsm(__f_3.toString()); Filer: ranjitkan See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
May 20 2016
,
May 26 2016
ClusterFuzz has detected this issue as fixed in range 36502:36503. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6202746537771008 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::internal::wasm::WasmLinker::LinkFunction v8::internal::wasm::WasmLinker::Link v8::internal::wasm::WasmModule::Instantiate Regressed: V8: r36371:36372 Fixed: V8: r36502:36503 Minimized Testcase (0.26 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv958aDDLvDpNtCzgvMnyKAsNriID1gthbNH4koYSQYdmgf3u9qKmTvD2Denj82xOqKkwHwfMb_gIFl1lIwysGp3Dj56pwzQXaJswzaXBJ9dSjMD3aqqQEjm-pkcEqBB_R5iliq8fcFKkJmEFCMcSlXrSUI7F9Q function __f_0() { } function __f_3(){ 'use asm'; function __f_5() { __v_13 = __v_4; var __v_13 = 1, __v_14 = 0; var __v_3 = 0, __v_4 = 0 } return { __f_5: __f_5 }; } var __v_11 = Wasm.instantiateModuleFromAsm(__f_3.toString()); See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 14 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 18 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ranjitkan@chromium.org
, May 20 2016Components: Tools>Test>FindIt>NoResult
Labels: -Pri-1 M52 findit-wrong Te-Logged Pri-2