New issue
Advanced search Search tips

Issue 627797 link

Starred by 1 user
Status: Duplicate
Merged: issue 628222
Owner:
senorblanco@chromium.org
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Crash in SkImageFilterCache::Get

Project Member Reported by ClusterFuzz, Jul 13 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5023843517464576

Fuzzer: sugoi_filter_fuzzer
Job Type: linux_asan_filter_fuzz_stub
Platform Id: linux

Crash Type: UNKNOWN WRITE
Crash Address: 0x000000000008
Crash State:
  SkImageFilterCache::Get
  SkImageFilter::~SkImageFilter
  SkPictureImageFilter::~SkPictureImageFilter
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_filter_fuzz_stub&range=390115:390221

Minimized Testcase (0.12 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95hO2cx8a_cUJ9lVtuwltKbG2GQg287cechyZr-jKT3l9zEWdrSOTOK7WZUeUdbX6BTALmZ0QOab2wf9BNbFakvxSn-vl_JheRiH96rBMox09CKUQiAiV0FlvWVicESTSTc7sepKNOq1sl5nQ3oGKImetZRNw?testcase_id=5023843517464576

Filer: brajkumar

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by brajkumar@chromium.org, Jul 13 2016

Labels: findit-for-crash Te-Logged
Owner: senorblanco@chromium.org
Status: Assigned (was: Available)
No CL in the regression range changes the crashed files. The result is the blame information.

Suspected CL could be
======================
Author: senorblanco
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/900c36779610dc65c42a5004ee3693fd70961ba4
Time: Wed Apr 27 18:31:23 2016
The CL last changed line 49 of file SkImageFilterCache.h, which is stack frame 5.

Suspected Project: chromium-buildtools
==========================================
senorblanco@: Could you please look into this issue if it is related to your change, else please help us in assigning it to the right owner.

Thanks!

Comment 2 by senorblanco@chromium.org, Aug 9 2016

Labels: -ClusterFuzz -findit-for-crash Clusterfuzz Findit-for-crash
Mergedinto: 628222
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment