New issue
Advanced search Search tips

Issue 628444 link

Starred by 1 user
Status: Fixed
Owner:
kcc@chromium.org
Closed: Nov 2016
Cc:
jochen@chromium.org
hablich@chromium.org
mstarzinger@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 1
Type: Bug



Sign in to add a comment

Crash in v8_fuzzer::FuzzerSupport::GetIsolate

Project Member Reported by ClusterFuzz, Jul 15 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4800417557118976

Fuzzer: libfuzzer_v8_regexp_parser_fuzzer
Job Type: mac_libfuzzer_chrome_asan
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000000000010
Crash State:
  v8_fuzzer::FuzzerSupport::GetIsolate
  LLVMFuzzerTestOneInput
  fuzzer::Fuzzer::ExecuteCallback
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97M5bbVt-fGz1eJYE0nE4g-WeMMDFYi7LuHBVgDOtY-Xk22OiZ1vVTcmdG0vmzoMdpYbatfX3byDHo3-VqN24biWy3ql5Y62DbN-0hDK7fwE6pgfm6aILhbqRHa3cJ1Dxu9CKYO_Z7vSWiZ8lhmeEK-_dITkg?testcase_id=4800417557118976


Filer: mmohammad

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by mmohammad@chromium.org, Jul 15 2016

Cc: mstarzinger@chromium.org

Comment 2 by mmohammad@chromium.org, Jul 15 2016

Cc: hablich@chromium.org

Comment 3 by cbiesin...@chromium.org, Jul 20 2016

Components: Blink>JavaScript

Comment 4 by ishell@chromium.org, Jul 25 2016

Labels: -ClusterFuzz Clusterfuzz
Owner: jochen@chromium.org
Status: Assigned (was: Available)
Seems to be v8_fuzzer::FuzzerSupport related. Somehow the FuzzerSupport instance was not initialized.

Comment 5 by jochen@chromium.org, Jul 25 2016

Cc: jochen@chromium.org
Owner: kcc@chromium.org
Seems like Fuzzer::ShuffleAndMinimize doesn't call LLVMFuzzerInitializer

Comment 6 by mmoroz@chromium.org, Nov 11 2016

Status: Fixed (was: Assigned)
The crash has been marked as non-reproducible, I'm closing the issue.
Project Member

Comment 7 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment