Issue 633063 link

Starred by 0 users

Issue metadata

Status:	Fixed
Owner:	█ caryclark@google.com Last visit > 30 days ago
Closed:	Aug 2016
Cc:	█ caryclark@chromium.org █ ranjitkan@chromium.org
EstimatedDays:	----
NextAction:	----
OS:	Linux
Pri:	2
Type:	Bug-Regression
Te-Logged Stability-Crash Reproducible Stability-Memory-AddressSanitizer Findit-for-crash M-54 Stability-Libfuzzer Clusterfuzz

Crash in next

Project Member Reported by ClusterFuzz, Aug 1 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4713268927266816

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000018
Crash State:
  next
  SkOpPtT::contains
  SkOpCoincidence::addExpanded
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=408882:408884

Minimized Testcase (0.42 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96NyXZ9Y-CQw-VdgvByXoAE3vEQEfGthmf8i8gx894mwt8A4ekGXm46l5SEWBvwKF8GkiPSA_5rY6Cf3pWFcwz0sC61407Ch-8fa4F8dlZ4ol_X8sqCQVHk8p9HZF9xwUlvFQc_qf-HRBl6L7IQEOxAceXygQ?testcase_id=4713268927266816

Filer: ranjitkan

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by ranjitkan@chromium.org, Aug 1 2016

Components: Tools>Test>FindIt>CorrectResult
Labels: -Pri-1 -Type-Bug M-54 Findit-for-crash Te-Logged Pri-2 Type-Bug-Regression
Owner: caryclark@chromium.org
Status: Assigned (was: Untriaged)

Author: caryclark
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/54359294a7c9dc54802d512a5d891a35c1663392
Time: Thu Mar 26 14:52:43 2015
The CL last changed line 101 of file SkOpSpan.h, which is stack frame 0.

@caryclark: Request you to please take a look into it. Please help us to reassign if not with respect to your change.

Thanks.!

Project Member

Comment 2 by bugdroid1@chromium.org, Aug 8 2016

The following revision refers to this bug:
  https://skia.googlesource.com/skia.git/+/643ede69216c073c2dd497c382577dc9fde36b3e

commit 643ede69216c073c2dd497c382577dc9fde36b3e
Author: caryclark <caryclark@google.com>
Date: Mon Aug 08 21:27:45 2016

template intersection fuzz fixes

Plumb in the ability to ignore asserts for out of range input
deeper into the template intersection code.

Exit gracefully when error conditions are found.

TBR=reed@google.com
BUG= 632607 , 632628 , 633063 , 633065 , 634251 , 633608 
GOLD_TRYBOT_URL= https://gold.skia.org/search?issue=2224823004

Review-Url: https://codereview.chromium.org/2224823004

[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkOpCoincidence.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsOp.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsTSect.h
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/tests/PathOpsOpTest.cpp

Comment 3 by caryclark@google.com, Aug 8 2016

Cc: caryclark@chromium.org
Owner: caryclark@google.com

Comment 4 by caryclark@google.com, Aug 9 2016

Status: Fixed (was: Assigned)

Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

►

Issue 633063 link

Issue metadata

Crash in next

Issue description

Comment 1 by ranjitkan@chromium.org, Aug 1 2016

Comment 1 Deleted

Comment 2 by bugdroid1@chromium.org, Aug 8 2016

Comment 2 Deleted

Comment 3 by caryclark@google.com, Aug 8 2016

Comment 3 Deleted

Comment 4 by caryclark@google.com, Aug 9 2016

Comment 4 Deleted

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Comment 5 Deleted

Sign in to add a comment