Issue metadata
Sign in to add a comment
|
Data race in blink::ImageFrame::setSizeAndColorProfile |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4824672334249984 Fuzzer: inferno_layout_test_unmodified Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race READ 1 Crash Address: 0x7f887001fab0 Crash State: blink::ImageFrame::setSizeAndColorProfile blink::GIFImageDecoder::initFrameBuffer blink::GIFImageDecoder::haveDecodedRow Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=411233:411257 Minimized Testcase (0.07 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv95bd-sRoztjZSPxzcPJTP3aR7YK8xswOZXgcx0cSUU-JA5xTHzpgfWV028mHoguoKSdQtCqJAbAe_0laR2jDAwM93eRnk-PBsH8RrOqAwBFFO4rgUUP4-D2k22YAnD5avInhzKlYH7wXgQQfk6ZlOYVTXQmSQ?testcase_id=4824672334249984 <meta http-equiv="refresh" content="0; url=http://natpa.com/"</html> Issue manually filed by: nyerramilli See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Aug 11 2016
,
Nov 19 2016
ClusterFuzz has detected this issue as fixed in range 433191:433320. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4824672334249984 Fuzzer: inferno_layout_test_unmodified Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race READ 1 Crash Address: 0x7f887001fab0 Crash State: blink::ImageFrame::setSizeAndColorProfile blink::GIFImageDecoder::initFrameBuffer blink::GIFImageDecoder::haveDecodedRow Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=411233:411257 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=433191:433320 Minimized Testcase (0.07 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv95bd-sRoztjZSPxzcPJTP3aR7YK8xswOZXgcx0cSUU-JA5xTHzpgfWV028mHoguoKSdQtCqJAbAe_0laR2jDAwM93eRnk-PBsH8RrOqAwBFFO4rgUUP4-D2k22YAnD5avInhzKlYH7wXgQQfk6ZlOYVTXQmSQ?testcase_id=4824672334249984 <meta http-equiv="refresh" content="0; url=http://natpa.com/"</html> See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by nyerramilli@google.com
, Aug 11 2016Components: Tools>Test>FindIt>CorrectResult
Labels: Findit-for-crash Te-Logged
Owner: ccameron@chromium.org
Status: Assigned (was: Untriaged)