Issue 633065 link

Starred by 0 users

Issue metadata

Status:	Fixed
Owner:	█ caryclark@google.com Last visit > 30 days ago
Closed:	Aug 2016
Cc:	█ caryclark@chromium.org █ ranjitkan@chromium.org
EstimatedDays:	----
NextAction:	----
OS:	Linux
Pri:	2
Type:	Bug-Regression
Te-Logged Stability-Crash Reproducible Stability-Memory-AddressSanitizer Findit-for-crash M-54 Stability-Libfuzzer Clusterfuzz

Crash in coinPtTStart

Project Member Reported by ClusterFuzz, Aug 1 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6121345232666624

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000008
Crash State:
  coinPtTStart
  SkOpCoincidence::checkOverlap
  SkOpCoincidence::addOrOverlap
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=408882:408884

Minimized Testcase (0.43 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96k0v7ujy53IugfMSYxpA2c7do6ylPx4BEpTWcxNNR35YZGTRe_y43JVBdt6q-tNOxzc1kltMpO4ycbzBKk8iQwU6OX7yihZ5Sqz7Kh8Y6yPFK37QKmkLwFUZX7tT6bZUuB00nXDuRFKXAxugKms1eEkKdGaw?testcase_id=6121345232666624

Filer: ranjitkan

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by ranjitkan@chromium.org, Aug 1 2016

Cc: ranjitkan@chromium.org
Components: Tools>Test>FindIt>CorrectResult
Labels: -Pri-1 -Type-Bug M-54 Findit-for-crash Te-Logged Pri-2 Type-Bug-Regression
Owner: caryclark@chromium.org
Status: Assigned (was: Untriaged)

Author: caryclark
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/55888e44171ffd48b591d19256884a969fe4da17
Time: Mon Jul 18 17:01:36 2016
The CL last changed line 21 of file SkOpCoincidence.h, which is stack frame 0.

@caryclark: Request you to please take a look into it. Please help us to reassign if not with respect to your change.

Thanks.!

Project Member

Comment 2 by bugdroid1@chromium.org, Aug 8 2016

The following revision refers to this bug:
  https://skia.googlesource.com/skia.git/+/643ede69216c073c2dd497c382577dc9fde36b3e

commit 643ede69216c073c2dd497c382577dc9fde36b3e
Author: caryclark <caryclark@google.com>
Date: Mon Aug 08 21:27:45 2016

template intersection fuzz fixes

Plumb in the ability to ignore asserts for out of range input
deeper into the template intersection code.

Exit gracefully when error conditions are found.

TBR=reed@google.com
BUG= 632607 , 632628 , 633063 , 633065 , 634251 , 633608 
GOLD_TRYBOT_URL= https://gold.skia.org/search?issue=2224823004

Review-Url: https://codereview.chromium.org/2224823004

[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkOpCoincidence.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsOp.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsTSect.h
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/tests/PathOpsOpTest.cpp

Comment 3 by caryclark@google.com, Aug 8 2016

Cc: caryclark@chromium.org
Owner: caryclark@google.com

Comment 4 by caryclark@google.com, Aug 9 2016

Status: Fixed (was: Assigned)

Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

►

Issue 633065 link

Issue metadata

Crash in coinPtTStart

Issue description

Comment 1 by ranjitkan@chromium.org, Aug 1 2016

Comment 1 Deleted

Comment 2 by bugdroid1@chromium.org, Aug 8 2016

Comment 2 Deleted

Comment 3 by caryclark@google.com, Aug 8 2016

Comment 3 Deleted

Comment 4 by caryclark@google.com, Aug 9 2016

Comment 4 Deleted

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Comment 5 Deleted

Sign in to add a comment