number->IsHeapNumber() in conversions-inl.h |
||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5289183442894848 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_ignition_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: number->IsHeapNumber() in conversions-inl.h Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94kJCqGALlqtFLIGz0VBGDJ2Fbtj6K6FsAF1IMq4lzpXjpT-r3ZKFkHLfhvuNMXNZ1kZOcKqqh5iz4cJJIQe-Yq1VWVhyz5D-Nc1V3l83xtf00ryCoG2OVlBO-PDfkBcje_Z56yohxoOZeSuHnNgDCoCwf4wKLdeiHnK69qPp3C82oRVTM?testcase_id=5289183442894848 Filer: mstarzinger See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
||
►
Sign in to add a comment |
||
Comment 1 by mstarzinger@chromium.org
, Jul 1 2016