Crash in v8::internal::HeapObject::SizeFromMap |
|||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6106503536967680 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000003 Crash State: v8::internal::HeapObject::SizeFromMap v8::internal::PagedSpace::Verify v8::internal::Heap::Verify Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95_TJ2eC0Kg_ceTv0A5uHGIapwLUk1_AyOoBXI2IUVTGtgy9sDwuceH12I87FqV6RKyIMrXPiiuA0ALNANoHMjQSx490BOGygfApfZFg4CcVmd282fA5soAcRmsDwS9gV4y9Fg7aSpHOh0kaxJXzIWTTiyTng?testcase_id=6106503536967680 Issue manually filed by: nyerramilli See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Sep 6 2016
,
Sep 7 2016
,
Sep 14 2016
,
Oct 5 2016
ClusterFuzz has detected this issue as fixed in range 422375:422396. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6106503536967680 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_chrome_v8_arm Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00000003 Crash State: v8::internal::HeapObject::SizeFromMap v8::internal::PagedSpace::Verify v8::internal::Heap::Verify Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=422375:422396 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95_TJ2eC0Kg_ceTv0A5uHGIapwLUk1_AyOoBXI2IUVTGtgy9sDwuceH12I87FqV6RKyIMrXPiiuA0ALNANoHMjQSx490BOGygfApfZFg4CcVmd282fA5soAcRmsDwS9gV4y9Fg7aSpHOh0kaxJXzIWTTiyTng?testcase_id=6106503536967680 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 5 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 18 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by nyerramilli@chromium.org
, Aug 9 2016Components: Tools>Test>FindIt>WrongResult Blink>JavaScript
Labels: findit-wrong Te-Logged M-53
Status: Available (was: Untriaged)