New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 631992 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Last visit > 30 days ago
Closed: Jul 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Crash in next

Project Member Reported by ClusterFuzz, Jul 27 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6601534280564736

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000018
Crash State:
  next
  SkOpCoincidence::addEndMovedSpans
  addEndMovedSpans
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405990:406128

Minimized Testcase (0.49 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97lJoF1ywIHfRYNn2ZoJ7ffg9ckRbvnG3bBxcU1xlTt-N54bMLiqWyJ-Ffq2A6k-WK_lTf6QD0y7EMXTBeEU-fJVALIVxvbj3i4BHBEIkc0QCX4fydxw9oFEwrspM8vBxQqUtYqawk7i6Nf8Q9QjoqwotlZ-g?testcase_id=6601534280564736

Filer: rnimmagadda

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Components: Tools>Test>FindIt>CorrectResult
Labels: -Pri-1 -Type-Bug M-54 Findit-for-crash Te-Logged Pri-2 Type-Bug-Regression
Owner: caryclark@chromium.org
Status: Assigned (was: Untriaged)
Suspecting:

Author: caryclark
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/55888e44171ffd48b591d19256884a969fe4da17
Time: Mon Jul 18 17:01:36 2016
Lines 312, 322 of file SkPathOpsOp.cpp which potentially caused crash are changed in this cl (frame #5, "OpDebug").

Lines 473-498 of file SkPathOpsCommon.cpp which potentially caused crash are changed in this cl (frame #4, "HandleCoincidence").

Lines 275, 348-368, 395 of file SkOpCoincidence.cpp which potentially caused crash are changed in this cl (frame #1, "SkOpCoincidence::addEndMovedSpans"; frame #2, "addEndMovedSpans"; frame #3, "SkOpCoincidence::addEndMovedSpans").

File SkOpBuilder.cpp is changed in this cl (and is part of stack frame #6, "SkOpBuilder::resolve")
Minimum distance from crash line to modified line: 0. (file: SkPathOpsOp.cpp, crashed on: 322, modified: 322).

@caryclark: Could you please look into this issue.

Thank you.
Status: Started (was: Assigned)
Project Member

Comment 4 by bugdroid1@chromium.org, Jul 27 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/b8093c0e629c888bad9b0da0d1f477fa6d1c6bc9

commit b8093c0e629c888bad9b0da0d1f477fa6d1c6bc9
Author: skia-deps-roller <skia-deps-roller@chromium.org>
Date: Wed Jul 27 18:30:06 2016

Roll src/third_party/skia/ 735109c24..89da69303 (10 commits).

https://chromium.googlesource.com/skia.git/+log/735109c24892..89da69303550

$ git log 735109c24..89da69303 --date=short --no-merges --format='%ad %ae %s'
2016-07-27 halcanary DEPS: ICU c291cde → ec9c113
2016-07-27 halcanary DEPS:  harfbuzz 1.2.7 → 1.3.0
2016-07-27 halcanary DEPS:  sfntly 130f832 → 468cad5
2016-07-27 borenet Include "revision" tag for all Swarming tasks
2016-07-27 brianosman Fix ParseConfigs_ViaParsing test when skia_angle=1
2016-07-27 bsalomon Fix leak of srgb/adobesrgb colorspace objects
2016-07-27 borenet Fix Perf data upload
2016-07-27 bsalomon SW backend for viewer on Windows GOLD_TRYBOT_URL= https://gold.skia.org/search?issue=2182273002
2016-07-27 caryclark fuzz wednesday
2016-07-27 mtklein Clean up some unused atomic routines.

BUG= 631564 , 631992 

CQ_INCLUDE_TRYBOTS=master.tryserver.blink:linux_precise_blink_rel
TBR=tomhudson@google.com

Review-Url: https://codereview.chromium.org/2187903002
Cr-Commit-Position: refs/heads/master@{#408192}

[modify] https://crrev.com/b8093c0e629c888bad9b0da0d1f477fa6d1c6bc9/DEPS

Status: Fixed (was: Started)
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment