Author: caryclark
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/1049f1246e7be4ccb68001361efceb8933e6f81c
Time: Mon Apr 20 15:31:59 2015
The CL last changed line 688 of file SkPathOpsTSect.h, which is stack frame 0.

@caryclark: Assigning to you. Request you to please take a look into it. Please help us to reassign if not with respect to your changes.

Thanks.!

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6251406975827968

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000078
Crash State:
  removeAllBounded
  updateBounded
  SkTSect<SkDConic, SkDConic>::extractCoincident
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405990:406128

Minimized Testcase (0.48 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95OW9BthLvnaZh-GqJqSwzcm3IDhbQAAQY4tZRDJYCXP6nKIyXYBZPM6_9FgCRAHqp5ZtPnpK9siMv9UzCrIoHKfX4ICY15f2s7NvZJypiOk2oWBd_4y6tuGDsEAmH94fd5ypOPatgY52ErHq2-l6ObvAGAjw?testcase_id=6251406975827968

Issue manually filed by: ranjitkan

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

The following revision refers to this bug:
  https://skia.googlesource.com/skia.git/+/643ede69216c073c2dd497c382577dc9fde36b3e

commit 643ede69216c073c2dd497c382577dc9fde36b3e
Author: caryclark <caryclark@google.com>
Date: Mon Aug 08 21:27:45 2016

template intersection fuzz fixes

Plumb in the ability to ignore asserts for out of range input
deeper into the template intersection code.

Exit gracefully when error conditions are found.

TBR=reed@google.com
BUG= 632607 , 632628 , 633063 , 633065 , 634251 , 633608 
GOLD_TRYBOT_URL= https://gold.skia.org/search?issue=2224823004

Review-Url: https://codereview.chromium.org/2224823004

[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkOpCoincidence.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsOp.cpp
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/src/pathops/SkPathOpsTSect.h
[modify] https://crrev.com/643ede69216c073c2dd497c382577dc9fde36b3e/tests/PathOpsOpTest.cpp

ClusterFuzz has detected this issue as fixed in range 410317:410489.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6251406975827968

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000078
Crash State:
  removeAllBounded
  updateBounded
  SkTSect<SkDConic, SkDConic>::extractCoincident
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405990:406128
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=410317:410489

Minimized Testcase (0.48 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95OW9BthLvnaZh-GqJqSwzcm3IDhbQAAQY4tZRDJYCXP6nKIyXYBZPM6_9FgCRAHqp5ZtPnpK9siMv9UzCrIoHKfX4ICY15f2s7NvZJypiOk2oWBd_4y6tuGDsEAmH94fd5ypOPatgY52ErHq2-l6ObvAGAjw?testcase_id=6251406975827968

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 410317:410489.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6646598056804352

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000070
Crash State:
  removeAllBounded
  updateBounded
  SkTSect<SkDConic, SkDQuad>::extractCoincident
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=409276:409365
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=410317:410489

Minimized Testcase (0.39 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95B_jgjIIncfCz8ejMMSva9_ioFYAD8ZY3D5pjDhVuTD2i43FChKc4zajLnDEwMC0eBRqYoYDsVacUMwWXqb0qtZXmeaqxz9tKby1jTmMfyrcA6b3oHwsnDBfuchZ0UnqEmvxLNtY9Cj1CyJBMe6e0PoxYt1g?testcase_id=6646598056804352

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot