right_val != 0 in instruction-selector-arm64.cc |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5004497967644672 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_arm64_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: right_val != 0 in instruction-selector-arm64.cc Regressed: V8: r38805:38806 Minimized Testcase (0.17 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97HDlCwrT9UQi6j7EVJdG-cW3B1cqAan5UoikpcuKSG_UGpZ9lB6lxv1Su45UUd50QnPFWUooEwy4vb4fhviarEgzLGGksaGmhIuIH6EWbmgu2u44LRXDLWXxJTox4ZEQmiy3D-_-RxjJWIQQHmSArGXVPTvg?testcase_id=5004497967644672 var __f_2 = (function __f_4() { "use asm"; function __f_2(i) { i = i|0; i = i << -2147483648 >> -1073741824; return i|0; } return { __f_2: __f_2 }; })().__f_2; Issue manually filed by: rossberg See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jan 10 2017
Fix out for review: https://codereview.chromium.org/2620953002
,
Jan 11 2017
ClusterFuzz has detected this issue as fixed in range 42189:42190. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5004497967644672 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_arm64_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: right_val != 0 in instruction-selector-arm64.cc Sanitizer: address (ASAN) Regressed: V8: r38805:38806 Fixed: V8: r42189:42190 Minimized Testcase (0.17 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97HDlCwrT9UQi6j7EVJdG-cW3B1cqAan5UoikpcuKSG_UGpZ9lB6lxv1Su45UUd50QnPFWUooEwy4vb4fhviarEgzLGGksaGmhIuIH6EWbmgu2u44LRXDLWXxJTox4ZEQmiy3D-_-RxjJWIQQHmSArGXVPTvg?testcase_id=5004497967644672 var __f_2 = (function __f_4() { "use asm"; function __f_2(i) { i = i|0; i = i << -2147483648 >> -1073741824; return i|0; } return { __f_2: __f_2 }; })().__f_2; See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jan 11 2017
ClusterFuzz testcase 5004497967644672 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by rossberg@chromium.org
, Aug 29 2016Status: Assigned (was: Untriaged)