Issue metadata
Sign in to add a comment
|
Undefined-shift in double WTF::toDoubleType<unsigned char, |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5984923500675072 Fuzzer: inferno_twister Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: double WTF::toDoubleType<unsigned char, blink::CSSTokenizerInputStream::getDouble blink::CSSTokenizer::consumeNumber Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=370022:370027 Minimized Testcase (0.07 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv96_jrjiWsVV-zHvH5T_S0s53NEPEVs97JdODvbDXjtqCzXMPk5euWWtJRLhHumXnKKPYE0p1hd1NnZvAUu2slsO24WWu6kxv0NKs66utQVN0zZWSv4WIVemc6blCijklPL8dDGj_k3diwpRiU2d7rNnrxlldg?testcase_id=5984923500675072 <div style="flex: 0 100000000000000000000000000000000000000 600px;"> Additional requirements: Requires HTTP Filer: shans See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jul 21 2016
,
Jul 21 2016
,
Jul 21 2016
If the error is something akin to: ../../third_party/WebKit/Source/wtf/dtoa/strtod.cc:271:15: runtime error: shift exponent 63 is too large for 32-bit type int (same line# et.c but potentially differing in the '63' part) which likely means a float (string) with lots of zeros in it being the source, then feel free to dupe to issue 629034 .
,
Aug 8 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by dtapu...@chromium.org
, Jul 20 2016Status: Untriaged (was: Available)