New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 634798 link

Starred by 1 user
Status: WontFix
Owner:
keishi@chromium.org
Closed: Oct 2016
Cc:
█ ranjitkan@chromium.org
style-bugs@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug-Regression



Sign in to add a comment

Crash in blink::StyleRuleBase::createCSSOMWrapper

Project Member Reported by ClusterFuzz, Aug 5 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5904884853637120

Fuzzer: inferno_twister
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  blink::StyleRuleBase::createCSSOMWrapper
  blink::CSSStyleSheet::item
  blink::CSSRuleListV8Internal::indexedPropertyGetterCallback
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=385470:385989

Minimized Testcase (7.63 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96L17lszs2JuLFHc5zM7cuPZMYC2_LCeORr6fgJXBuMpIBzUcF5DUxZG6IJATfW4bS3C9qrOuho_yYjgABW1RWuWKtWPy9qLnQpY3Yi26nQAq5z6CBT6SsHeRj2VbhiOLPNIIVZigDs4ISnbpvFPWQ690Nf1Q?testcase_id=5904884853637120

Issue manually filed by: ranjitkan

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by ranjitkan@chromium.org, Aug 5 2016

Cc: ranjitkan@chromium.org
Components: Tools>Test>FindIt>CorrectResult
Labels: -Pri-1 -Type-Bug M-54 Findit-for-crash Te-Logged Pri-2 Type-Bug-Regression
Owner: keishi@chromium.org
Status: Assigned (was: Untriaged)
Author: keishi
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/323d61ead93eeb077566ea4d014e6c038221ebaa
Time: Thu Apr 07 04:46:49 2016
Lines 208 of file StyleRule.cpp which potentially caused crash are changed in this cl (frame #1, "blink::StyleRuleBase::createCSSOMWrapper").

@keishi: Assigning to you. Request you to please take a look into it. Please help us to reassign to right owner if not with respect to your changes.

Thanks.!
Project Member

Comment 2 by ClusterFuzz, Aug 24 2016

Labels: Hotlist-SyzyASAN
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5124151713202176

Fuzzer: inferno_twister
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000003
Crash State:
  blink::StyleRuleBase::createCSSOMWrapper
  blink::StyleRuleBase::createCSSOMWrapper
  blink::CSSStyleSheet::item
  

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv96vVAFmRDEgMfMPKJsyQRP9qmG3vU-LRnL--8486FhI4TmuZUg64rZxrQoqfPu7XHVat7r_Zo0MMoJgSzBcrOL7L3x3jatUN_Dx0MnueFOdiHkyYrVDYdWm0R5dJGYqz-RAGfEAdoXDYrNsliG2jxUDuBSn9WnfopsBC-5rWqAJtn6uwVA?testcase_id=5124151713202176


Issue manually filed by: alancutter

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 3 by alancutter@chromium.org, Aug 24 2016

Components: -Tools>Test>FindIt>CorrectResult Blink>CSS

Comment 4 by meade@chromium.org, Oct 13 2016

Status: WontFix (was: Assigned)
WontFix non-reproducable clusterfuzz bugs in Style
Project Member

Comment 5 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment