New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 631184 link

Starred by 7 users

Issue metadata

Status: Verified
Owner:
Closed: Nov 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Chrome
Pri: 2
Type: Bug



Sign in to add a comment

"Copy Image" from right-click menu doesn't work consistenly

Project Member Reported by abodenha@chromium.org, Jul 25 2016

Issue description

Version: 54.0.2806.0
OS: Chrome

What steps will reproduce the problem?
(1) Right click on an image
(2) Choose "copy image"
(3) Paste it somewhere

What is the expected output?
Image from 1 is pasted in step 3

What do you see instead?
Sometimes the contents of the clipboard does not change in step 2.  When that happens, whatever was previously on the clipboard gets pasted instead. Retrying will often work.

Most times this works fine. Fails about 25% of the time on my device. I haven't been able to find a pattern of success/failure.



Please use labels and text to provide additional information.

 

Comment 2 by jen...@chromium.org, Jul 26 2016

I saw the same thing on other web pages too. "Copy Image" does not work with the small image, if user clicks on the small image, it will open a big image page, then "Copy Image" will work on the big image.

This looks like a bug for chrome on chromeos. dcheng@, do you have any idea why this happens?

Comment 3 by yosin@chromium.org, Jul 28 2016

 Issue 631991  has been merged into this issue.
Project Member

Comment 4 by ClusterFuzz, Jul 28 2016

Labels: Stability-Memory-AddressSanitizer
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6342012827860992

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  blink::hasEditableLevel
  blink::rootEditableElement
  blink::DeleteSelectionCommand::removeRedundantBlocks
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=404947:405052

Minimized Testcase (0.39 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96ofkyJuZwDMyf6jtzvHbb16rDWVf70KNbD-A3tm5csF04vNc9APwl9EE16BTV2X6CRbi4yjvz5iDPyExgurfaZsRvFTsW_2rUTzfPDIWQaQqXriXxp-sXl0iTwIXtc8dHvms5fhzvanfS2G6c1NxalwQos9Q?testcase_id=6342012827860992
<body onload="__f_611();"<div contenteditable="true" id="div">
   <table>
    <td>
       <br/>
       <span id="span">
        bar
   <script>
sel = window.getSelection();
sel.setBaseAndExtent(div, 0, span, span.childNodes.length);
document.execCommand("InsertOrderedList");
__v_246 = window.getSelection();
    __v_246.modify("extend", "forward", "line");
    document.execCommand("Cut");
</script>


Filer: rnimmagadda

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Project Member

Comment 5 by ClusterFuzz, Nov 24 2016

ClusterFuzz has detected this issue as fixed in range 434178:434255.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6342012827860992

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  blink::hasEditableLevel
  blink::rootEditableElement
  blink::DeleteSelectionCommand::removeRedundantBlocks
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=404947:405052
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_content_shell_drt&range=434178:434255

Minimized Testcase (0.39 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96ofkyJuZwDMyf6jtzvHbb16rDWVf70KNbD-A3tm5csF04vNc9APwl9EE16BTV2X6CRbi4yjvz5iDPyExgurfaZsRvFTsW_2rUTzfPDIWQaQqXriXxp-sXl0iTwIXtc8dHvms5fhzvanfS2G6c1NxalwQos9Q?testcase_id=6342012827860992
<body onload="__f_611();"<div contenteditable="true" id="div">
   <table>
    <td>
       <br/>
       <span id="span">
        bar
   <script>
sel = window.getSelection();
sel.setBaseAndExtent(div, 0, span, span.childNodes.length);
document.execCommand("InsertOrderedList");
__v_246 = window.getSelection();
    __v_246.modify("extend", "forward", "line");
    document.execCommand("Cut");
</script>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 6 by ClusterFuzz, Nov 24 2016

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment