New issue
Advanced search Search tips

Issue 640152 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 639812
Owner:
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Data race in base::SequencedWorkerPool::Inner::PostTask

Project Member Reported by ClusterFuzz, Aug 23 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6647942289293312

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race READ 4
Crash Address: 0x7f1fd58f05a8
Crash State:
  base::SequencedWorkerPool::Inner::PostTask
  base::SequencedWorkerPoolSequencedTaskRunner::PostDelayedTask
  base::TaskRunner::PostTask
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=413335:413348

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97PTDvM2E8zsNbOWxuqs14UlAunZBahyDHfNg4W3ZLA3h8vMCzBanVxDKQJsdxhzYi3VPlwB4IW_K6ZzvPK6PDAzPY3cKJ-fEA861tL3AaQ8ZiP9SfxT6h0DNiE0Ovi_7NTk9BlsgILmTRlsSN8PJnlLiSx5w?testcase_id=6647942289293312


Issue manually filed by: durga.behera

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Components: Tools>Test>FindIt>CorrectResult
Labels: M-54 Te-Logged
Owner: gab@chromium.org
Status: Assigned (was: Untriaged)
Suspected CLs:
=================
The result is a list of CLs that change the crashed files.

Author: gab
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/5a65a6844ec5348feedb041cad8721ab79715395
Time: Sat Aug 20 18:30:11 2016
Lines 709-718 of file sequenced_worker_pool.cc which potentially caused crash are changed in this cl (frame #0, "base::SequencedWorkerPool::Inner::PostTask").
Minimum distance from crash line to modified line: 0. (file: sequenced_worker_pool.cc, crashed on: 709, modified: 709).

=================
Suspected Project: chromium

From the above suspect list from find it there is only one Cl and the changes made to the file "sequenced_worker_pool.cc"might be the suspect.

suspect : https://chromium.googlesource.com/chromium/src/+/5a65a6844ec5348feedb041cad8721ab79715395
gab@ : Could you please take a look into this if its related to your change.

Comment 2 by gab@chromium.org, Aug 31 2016

Mergedinto: 639812
Status: Duplicate (was: Assigned)
Project Member

Comment 3 by ClusterFuzz, Sep 2 2016

ClusterFuzz has detected this issue as fixed in range 415934:416233.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6647942289293312

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Data race READ 4
Crash Address: 0x7f1fd58f05a8
Crash State:
  base::SequencedWorkerPool::Inner::PostTask
  base::SequencedWorkerPoolSequencedTaskRunner::PostDelayedTask
  base::TaskRunner::PostTask
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=413335:413348
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_tsan_chrome_mp&range=415934:416233

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97PTDvM2E8zsNbOWxuqs14UlAunZBahyDHfNg4W3ZLA3h8vMCzBanVxDKQJsdxhzYi3VPlwB4IW_K6ZzvPK6PDAzPY3cKJ-fEA861tL3AaQ8ZiP9SfxT6h0DNiE0Ovi_7NTk9BlsgILmTRlsSN8PJnlLiSx5w?testcase_id=6647942289293312


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment