that == __null || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSR |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6227774977343488 Fuzzer: v8_builtins_generator Job Type: linux_asan_d8_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: that == __null || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSR Regressed: V8: r37869:37870 Minimized Testcase (0.11 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv96Axbsy7e8-tIrfbfzhgs47AN63YOIPk7Cs9BRo_17wD_kCTsST8TYgJERrjfg9EZQQmWKxxnxG67KqlCIomFaLw11T0v3vxwqbZufTvU7EkwmfbhLRQ_P1hpsonhk-XQlxU5NfcqH0U8JsEykwSx7NoDt_pg?testcase_id=6227774977343488 v4 = new ReferenceError(); var v7 = eval(); v18 = Reflect.ownKeys(v4); v21 = Reflect.get(v4, v18, v7); Filer: mummareddy See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jul 19 2016
NULL present in crash state. closing this bug. thanks.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Mar 1 2017
ClusterFuzz has detected this issue as fixed in range 43313:43314. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6227774977343488 Fuzzer: v8_builtins_generator Job Type: linux_asan_d8_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: that == __null || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSR Sanitizer: address (ASAN) Regressed: V8: 37869:37870 Fixed: V8: 43313:43314 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94COhpVEyAlfOvrAb6QCUFagV4kYvbOmqBiyPp6pvujJdO1tGBaKySfw-LtTmfshx3ZpSTP1nW163gm-VInuknC-sJulwmzJh5EwAf6ubQRRainhnHjVK4Ig8Vua59d7ktwDvS_Jx6kZNQO2N6UgcUGNgOxDg?testcase_id=6227774977343488 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 1 2017
ClusterFuzz has detected this issue as fixed in range 43313:43314. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6227774977343488 Fuzzer: v8_builtins_generator Job Type: linux_asan_d8_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: that == __null || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSR Sanitizer: address (ASAN) Regressed: V8: 37869:37870 Fixed: V8: 43313:43314 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94COhpVEyAlfOvrAb6QCUFagV4kYvbOmqBiyPp6pvujJdO1tGBaKySfw-LtTmfshx3ZpSTP1nW163gm-VInuknC-sJulwmzJh5EwAf6ubQRRainhnHjVK4Ig8Vua59d7ktwDvS_Jx6kZNQO2N6UgcUGNgOxDg?testcase_id=6227774977343488 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 1 2017
ClusterFuzz has detected this issue as fixed in range 43313:43314. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6227774977343488 Fuzzer: v8_builtins_generator Job Type: linux_asan_d8_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: that == __null || (*reinterpret_cast<v8::internal::Object* const*>(that))->IsJSR Sanitizer: address (ASAN) Regressed: V8: 37869:37870 Fixed: V8: 43313:43314 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94COhpVEyAlfOvrAb6QCUFagV4kYvbOmqBiyPp6pvujJdO1tGBaKySfw-LtTmfshx3ZpSTP1nW163gm-VInuknC-sJulwmzJh5EwAf6ubQRRainhnHjVK4Ig8Vua59d7ktwDvS_Jx6kZNQO2N6UgcUGNgOxDg?testcase_id=6227774977343488 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||
►
Sign in to add a comment |
|||
Comment 1 by mummare...@chromium.org
, Jul 19 2016