New issue
Advanced search Search tips

Issue 628200 link

Starred by 1 user
Status: Duplicate
Merged: issue 613881
Owner:
kojii@chromium.org
Closed: Jul 2016
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

m_width.fitsOnLine(rect.width() - 1) in BreakingContextInlineHeaders.h

Project Member Reported by ClusterFuzz, Jul 14 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5415443905118208

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  m_width.fitsOnLine(rect.width() - 1) in BreakingContextInlineHeaders.h
  blink::BreakingContext::rewindToMidWordBreak
  blink::BreakingContext::handleText
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=393279:393304

Minimized Testcase (0.24 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv9775Kodfb_29eicKkrlaZNwLhhSmXQ2k0JpWj22Jkeu70MA25cPCnrEsbc0sem1BDtp0e_53m5diEJ0Ka7Xw5l-VKPn_LQ_nAOrLmzdAnf5jUvOqMkkPcyhdhL_Ej6QsGQ_y3tGvQrbiEyzDfxdzshs1NMy1A?testcase_id=5415443905118208
k,y<media>.c0:lang(F����) { rx: 3px;<style>
* { animation-name: cfpulse76; font-size: 18446744073709551395px;</style><script>
var docElement = document.body ? document.body : document.documentElement;
docElement.contentEditable = "true";
</script>


Filer: kavvaru

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by kavvaru@chromium.org, Jul 14 2016

Components: Tools>Test>FindIt>NoResult Blink>Layout
Labels: Te-Logged M-52
Owner: kojii@chromium.org
Status: Assigned (was: Available)
Regression CL::
https://chromium.googlesource.com/chromium/src/+log/707acf00b575c669c3ccb4baabdfa7ea6d766790..db07b7eef2d16e540be161487127ba5894a79269?pretty=fuller

Possible suspect from the above CL
https://codereview.chromium.org/1966703002

kojii@ Could you please look into this issue if it is related to your change,else please route this to an appropriate dev person.

Thanks,

Comment 2 by kojii@chromium.org, Jul 15 2016

Labels: -Pri-1 Pri-3
Yeah, this is mine, probably a dup of  issue 613881 .

Why are we testing this, and why is this pri 1? This is DCHECK(), so it doesn't affect release build. Finding repro case for DCHECK is great and helpful, but pri 3 would be probably appropriate.

Comment 3 by kojii@chromium.org, Jul 21 2016

Mergedinto: 613881
Status: Duplicate (was: Assigned)

Comment 4 by kateso...@chromium.org, Oct 18 2016

Components: -Tools>Test>FindIt>NoResult
Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment