Undefined-shift in DiyFpStrtod |
|||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5678114141372416 Fuzzer: libfuzzer_stylesheet_contents_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: DiyFpStrtod parseDouble parseDouble Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=415619:415673 Minimized Testcase (0.21 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96_oKN0YXbQXEwNu6gCml4gLozJ6qwHAivB8Pu7OD_6gBTjmaH2DwBSyJanhkBVw7k5RXnPyCUDV5OzINilTCmVJP-JBgOuVDW_tMVwSqvgT5AxQXqvoEg6BkrEUAnVr-RHbpjUCmwml_O5g85R-2OOfsMYJQ?testcase_id=5678114141372416 Issue manually filed by: msrchandra See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Sep 14 2016
crazy stylesheet:
body {background:#fff;color:#33̀‰ondi*v { bo())))))))))))))defer))))))))))))9))))))))))3;border-*top:1)))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))))7777770derlin;7}77e77)))))))))
)))der-l
Not sure what part of this is causing the undefined shift, but I'm also confused where the large number is. What are the tokens that cause this?
,
Oct 6 2016
ClusterFuzz has detected this issue as fixed in range 423338:423416. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5678114141372416 Fuzzer: libfuzzer_stylesheet_contents_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Undefined-shift Crash Address: Crash State: DiyFpStrtod parseDouble parseDouble Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=415619:415673 Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=423338:423416 Minimized Testcase (0.21 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96_oKN0YXbQXEwNu6gCml4gLozJ6qwHAivB8Pu7OD_6gBTjmaH2DwBSyJanhkBVw7k5RXnPyCUDV5OzINilTCmVJP-JBgOuVDW_tMVwSqvgT5AxQXqvoEg6BkrEUAnVr-RHbpjUCmwml_O5g85R-2OOfsMYJQ?testcase_id=5678114141372416 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 6 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Oct 18 2016
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by msrchandra@chromium.org
, Sep 1 2016Labels: findit-wrong Te-Logged
Owner: esprehn@chromium.org
Status: Assigned (was: Untriaged)