New issue
Advanced search Search tips

Issue 630231 link

Starred by 1 user
Status: Duplicate
Merged: issue 629034
Owner:
f...@opera.com
Closed: Jul 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Undefined-shift in double WTF::toDoubleType<unsigned char,

Project Member Reported by ClusterFuzz, Jul 21 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4992735421661184

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Undefined-shift
Crash Address: 
Crash State:
  double WTF::toDoubleType<unsigned char,
  blink::parseToDoubleForNumberType
  blink::NumberInputType::sanitizeValue
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=370022:370027

Minimized Testcase (7.01 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97WPLKU6JCZg6QbOF7OZ8Goe_Q65XNLuhBHNiG3LCOHdlwUe-wGNbM997ajzBTZgqnl4uvvS6DLB_GPMz06ousDTcgDQHJA5UOZ8lZt0r3tMsOv4FWg3qGD36irEK8JFjzyTsstC85E2-dzrIrYAiaxCjIpWQ?testcase_id=4992735421661184

Additional requirements: Requires HTTP

Filer: brajkumar

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by brajkumar@chromium.org, Jul 21 2016

Labels: -Pri-1 Findit-for-crash Te-Logged Pri-2
Owner: f...@opera.com
Status: Assigned (was: Untriaged)
No CL in the regression range changes the crashed files. The result is the blame information.

Author: fs
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/1d6711a6b110f354e90ee7a481323b54c7655b2d
Time: Thu Jan 28 00:39:20 2016
The CL last changed line 147 of file HTMLParserIdioms.cpp, which is stack frame 6.

Suspected Project: chromium
============================
fs@: Could you please look into this issue if it is related to your change, else please help us in assigning it to the right owner.

Thanks!

Comment 2 by f...@opera.com, Jul 21 2016

Mergedinto: 629034
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment