New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 616993 link

Starred by 0 users
Status: Fixed
Owner:
fmalita@chromium.org
Closed: Jun 2016
Cc:
f...@opera.com
fmalita@chromium.org
infe...@chromium.org
█ ashej...@chromium.org
ajha@google.com
style-bugs@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug-Regression



Sign in to add a comment

ASSERTION FAILED: adjustedR0 <= adjustedR1

Project Member Reported by ClusterFuzz, Jun 3 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6079343654862848

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  ASSERTION FAILED: adjustedR0 <= adjustedR1
  blink::adjustGradientRadiiForOffsetRange
  blink::CSSGradientValue::addStops
  

Minimized Testcase (0.18 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94awMf6-_a2GAKKfR96ClpuIHbqgrkuDGWRRuBjg4LXP4F8oKUA1uukcdObq4ejqc-9TnX2sqQ9X5fm5PKuO_43IJkn7jiVjnuV7tY709LyswTzgBnHfmUlPrf0ybhu6sJzKhKuAkT3ffStzcSxw0gO3DOLyg

Filer: ajha

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by ajha@chromium.org, Jun 3 2016

Components: Blink>CSS Tools>Test>FindIt>CorrectResult
Labels: -Type-Bug Te-Logged Type-Bug-Regression
Owner: fmalita@chromium.org
Status: Assigned (was: Available)
Suspected CLs	Regression information is not available. The result is the blame information.

Author: fmalita@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/8d740ea7e1829561233466f984b04b85a10c917d
Time: Wed Feb 25 03:54:05 2015
The CL last changed line 327 of file CSSGradientValue.cpp, which is stack frame 0.

Author: fmalita@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/8d740ea7e1829561233466f984b04b85a10c917d
Time: Wed Feb 25 03:54:05 2015
The CL last changed line 471 of file CSSGradientValue.cpp, which is stack frame 1.

Author: fmalita@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/8d740ea7e1829561233466f984b04b85a10c917d
Time: Wed Feb 25 03:54:05 2015
The CL last changed line 1164 of file CSSGradientValue.cpp, which is stack frame 2.

Author: schenney
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/4afb23eb3dfc2fb9006ce3b69051cc108c241ba5
Time: Tue Mar 15 23:33:47 2016
The CL last changed line 78 of file CSSGradientValue.cpp, which is stack frame 3.

Author: dsinclair@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/da406c2427ae4c64f0b5cc12e69a3125dd4c2717
Time: Mon Apr 27 20:42:41 2015
The CL last changed line 131 of file CSSImageGeneratorValue.cpp, which is stack frame 4.

Author: dsinclair@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/4c40fce76c29acc6e722d6bf48b2c3d761f7cce0
Time: Fri Mar 06 04:41:42 2015
The CL last changed line 73 of file StyleGeneratedImage.cpp, which is stack frame 5.

Author: fmalita
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/4c1400381d16b6dcd8921a8f19a2ae9af4aac4cf
Time: Tue May 24 00:53:09 2016
The CL last changed line 351 of file BoxPainter.cpp, which is stack frame 6.

Suspected Project: chromium
Suspected Component: Blink>CSS

From the above FindIt result, this looks to be related to change in stack frame 6 by fmalita.

fmalita@: Could you please take a look at this.

Thank you!

Comment 2 by fmalita@chromium.org, Jun 5 2016

Cc: f...@opera.com

Comment 4 by fmalita@chromium.org, Jun 6 2016

Status: Fixed (was: Assigned)

Comment 5 by fmalita@chromium.org, Jun 9 2016

Cc: infe...@chromium.org ashej...@chromium.org fmalita@chromium.org
 Issue 617918  has been merged into this issue.
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment