New issue
Advanced search Search tips

Issue 642684 link

Starred by 1 user
Status: Duplicate
Merged: issue 628222
Owner:
robertphillips@chromium.org
Closed: Aug 2016
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug-Regression



Sign in to add a comment

Crash in SkMallocPixelRef::NewZeroed

Project Member Reported by ClusterFuzz, Aug 31 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5348866046296064

Fuzzer: sugoi_filter_fuzzer
Job Type: linux_asan_filter_fuzz_stub
Platform Id: linux

Crash Type: UNKNOWN WRITE
Crash Address: 0x000000000008
Crash State:
  SkMallocPixelRef::NewZeroed
  SkSpecialSurface::MakeRaster
  SkSpecialImage_Raster::onMakeSurface
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_filter_fuzz_stub&range=386318:386319

Minimized Testcase (0.28 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95OcvLvNfXNy6X2cFm65mBPCT_gvRrmp6tyDhYW3CZLlwscreHpjcVJdTe7cLcAXi4ToMYJSO4yeIMI6ZlC54sPHt_xCay_pjBcCthrxB9at7heLHoGFlenawT7oL77R7nxp2nMZ8UK8f8icVMg9_V4CitNZA?testcase_id=5348866046296064

Issue manually filed by: msrchandra

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by msrchandra@chromium.org, Aug 31 2016

Components: Tools>Test>FindIt>NoResult
Labels: -Type-Bug findit-wrong Te-Logged Type-Bug-Regression
Owner: robertphillips@chromium.org
Status: Assigned (was: Untriaged)
Unable to find the culprit using Code Search or find it.

Regression CL ::
https://chromium.googlesource.com/chromium/src/+log/fefaf92686d3786bd74fbda74d7dff3ca2f49e3e..ae82343d87b4b2b9f2048f7f82c901e23c0304a6?pretty=fuller

Skia CL ::
https://chromium.googlesource.com/skia/+log/e7365065acfe1fc6abbeb248fd5cc0ca83d9d341..82b043e87380a64ea4ca736b293ec0ee5c30e676?pretty=fuller

Possible suspect from the above skia roll
https://codereview.chromium.org/1861643003

robertphillips@ Could you please look into this issue if it is related to your change, else please route this to an appropriate owner for this issue.

Thanks,

Comment 2 by robertphillips@chromium.org, Aug 31 2016

Mergedinto: 628222
Status: Duplicate (was: Assigned)

Comment 3 by kateso...@chromium.org, Oct 18 2016

Components: -Tools>Test>FindIt>NoResult
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment