New issue
Advanced search Search tips

Issue 625914 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Jul 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

previousPositionOf() should handle no previous position case

Project Member Reported by ClusterFuzz, Jul 6 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5970908468740096

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  prev.deepEquivalent() != visiblePosition.deepEquivalent() (#text "\n            
  blink::previousPositionOfAlgorithm<>
  blink::previousPositionOf
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=388139:388165

Minimized Testcase (0.29 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv972sByk100RBfgvVDydXRXjcsIhlJp6RnQaLdk7A6HcyJDcbfT7nVGuht8g0vQEx7pzFqkZbsNe_ojqtlApyckTIfbNVw3a6aX2fJwLTq5UkGFvpMPLJKh8LcTKFNbWSzVDLNYB_5iPo3LdthF2BKExoTK1Qg?testcase_id=5970908468740096
        }
 <body contenteditable="true">
       <span contenteditable="false">
        <span contenteditable="true">
         <span>
               </span>
              <ol>
               bar
              <script>
document.execCommand("SelectAll");
document.execCommand("Indent");
</script>


Filer: calamity

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Cc: yosin@chromium.org yutak@chromium.org
Components: Blink>Editing

Comment 2 by yosin@chromium.org, Jul 6 2016

Owner: yosin@chromium.org
Status: Started (was: Available)
Summary: previousPositionOf() should handle there is no previous position (was: prev.deepEquivalent() != visiblePosition.deepEquivalent() (#text "\n )

Comment 3 by yosin@chromium.org, Jul 6 2016

Cc: -yosin@chromium.org -yutak@chromium.org
Summary: previousPositionOf() should handle no previous position case (was: previousPositionOf() should handle there is no previous position)
In review: http://crrev.com/2126743002
Project Member

Comment 4 by ClusterFuzz, Jul 6 2016

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5970908468740096

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  prev.deepEquivalent() != visiblePosition.deepEquivalent() (#text "\n            
  blink::previousPositionOfAlgorithm<>
  blink::previousPositionOf
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=388139:388165

Minimized Testcase (0.29 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv972sByk100RBfgvVDydXRXjcsIhlJp6RnQaLdk7A6HcyJDcbfT7nVGuht8g0vQEx7pzFqkZbsNe_ojqtlApyckTIfbNVw3a6aX2fJwLTq5UkGFvpMPLJKh8LcTKFNbWSzVDLNYB_5iPo3LdthF2BKExoTK1Qg?testcase_id=5970908468740096
        }
 <body contenteditable="true">
       <span contenteditable="false">
        <span contenteditable="true">
         <span>
               </span>
              <ol>
               bar
              <script>
document.execCommand("SelectAll");
document.execCommand("Indent");
</script>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Comment 5 by yosin@chromium.org, Jul 7 2016

Status: Fixed (was: Started)
Oops, I put wrong BUG= in crrev.com/2126743002
This issue is fixed by crrev.com/2126743002
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment