Issue metadata
Sign in to add a comment
|
Crash in v8::internal::Isolate::native_context |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5305333509783552 Fuzzer: mbarbella_js_mutation Job Type: linux_v8_d8_be Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffff8007 Crash State: v8::internal::Isolate::native_context v8::internal::TranslatedState::MaterializeAt v8::internal::TranslatedState::MaterializeAt Regressed: V8: r37842:37849 Minimized Testcase (0.22 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv96MMxy6qWsYF5UQbnJX3HF9UOMLAiwXLahX1gu8RnEzLYvPWHas1AMlV2zcfBAN4UYg-fEjZM34AGuSELh9jcldEADHbpbBabVohFDYD_SsQA1KotmGFW__E7_GrWpp2LYF3KTEdNYkB4s4_LD4m-2I5rkjUQ?testcase_id=5305333509783552 var __v_4 = {}; try { } catch(e) {; } function __f_1() { } function __f_2() { var __v_5 = function() { __v_5; } } function __f_5() { __v_4 = __f_2(); } function __f_4() { return __f_5(); } __f_4(); function __f_6() { } Filer: inferno See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jul 20 2016
,
Jul 20 2016
ClusterFuzz has detected this issue as fixed in range 37851:37885. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5305333509783552 Fuzzer: mbarbella_js_mutation Job Type: linux_v8_d8_be Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000ffff8007 Crash State: v8::internal::Isolate::native_context v8::internal::TranslatedState::MaterializeAt v8::internal::TranslatedState::MaterializeAt Regressed: V8: r37842:37849 Fixed: V8: r37851:37885 Minimized Testcase (0.22 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv96MMxy6qWsYF5UQbnJX3HF9UOMLAiwXLahX1gu8RnEzLYvPWHas1AMlV2zcfBAN4UYg-fEjZM34AGuSELh9jcldEADHbpbBabVohFDYD_SsQA1KotmGFW__E7_GrWpp2LYF3KTEdNYkB4s4_LD4m-2I5rkjUQ?testcase_id=5305333509783552 var __v_4 = {}; try { } catch(e) {; } function __f_1() { } function __f_2() { var __v_5 = function() { __v_5; } } function __f_5() { __v_4 = __f_2(); } function __f_4() { return __f_5(); } __f_4(); function __f_6() { } See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 26 2016
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by infe...@chromium.org
, Jul 20 2016Components: Blink>JavaScript
Labels: Pri-1
Owner: jarin@chromium.org
Status: Assigned (was: Available)