New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 617352 link

Starred by 0 users
Status: WontFix
Owner:
█ le...@chromium.org
Last visit > 30 days ago
Closed: Jun 2016
Cc:
█ mummare...@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

availableLogicalWidth >= 0

Project Member Reported by ClusterFuzz, Jun 3 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6427183686090752

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  availableLogicalWidth >= 0
  blink::LayoutBox::fillAvailableMeasure
  blink::LayoutBox::fillAvailableMeasure
  

Minimized Testcase (0.30 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97rW9Vr_HXINCpxP7Avt_WMNGUjuekGsYFmXZdy4uEmOOrLCEzdBBiFDa836qw-J2F3CCA6NxfxCTw3Zd1jcqMmMiCoUvbh_FoaShK0f0GmJvn7cak-gb25EBYu-Xtm2W5T5ZlJooISCTtTAsRoYL7VNJlLpw
 id=tCF9><img src=size.attributes.parse.junk.png</body><style>
* { will-change: contents; min-width: -webkit-fill-available;  }<style>
@keyframes cfpulse1 { 0% { opacity: 0.4765;  } 
 100% { opacity: 0.918;47);  } }
* { animation-name: cfpulse91; white-space-collapsing: discard; padding-left: 121in;</style>


Filer: mummareddy

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by mummare...@chromium.org, Jun 3 2016

Labels: findit-wrong Te-Logged M-52
Owner: le...@chromium.org
Status: Assigned (was: Available)
From findit tool:

Author: leviw
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/f4da8ea9338b87e2eba6f676c85cd2884417af62
Time: Tue Feb 02 02:01:44 2016
The CL last changed line 585 of file LayoutReplaced.cpp, which is stack frame 5.

Please duplicate if it is same  issue 560248 .
Project Member

Comment 2 by sheriffbot@chromium.org, Jun 4 2016

Labels: -M-52 M-53 MovedFrom-52
Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 3 by ClusterFuzz, Jun 9 2016 

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6427183686090752

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  availableLogicalWidth >= 0
  blink::LayoutBox::fillAvailableMeasure
  blink::LayoutBox::fillAvailableMeasure
  

Minimized Testcase (1.36 Kb): https://cluster-fuzz.appspot.com/download/AMIfv946I2oA6MEoZ-yM5LP6wCHkauWD4CHiIkl8I1v0cY1pl8KuYmY4MFZg0Zk91ax8qa86Z2UKK5lxbJy5vHFK4rhlNlpeLzPUXp-pLz6W1UOfqknnPoHV5V4ZUXGadab6bhyg5w147gQ4sSMXzWIq1GuFL4Tiaw

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Comment 4 by mummare...@chromium.org, Jun 10 2016

Status: WontFix (was: Assigned)
As per update#3, marking the bugs as wontfix.
Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment