(val)<=(std::numeric_limits<N>::max()) in operator.cc |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5387371799642112 Fuzzer: mbarbella_js_mutation Job Type: windows_asan_d8 Platform Id: windows Crash Type: CHECK failure Crash Address: Crash State: (val)<=(std::numeric_limits<N>::max()) in operator.cc V8_Fatal v8::internal::compiler::Operator::Operator v8::internal::compiler::CommonOperatorBuilder::Start Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=416526:416613 Minimized Testcase (0.10 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv95Z5QaW7DMSs_djjeLrwIcke1WZV4aY8TNgDH8xIBSHJgMHMG9kLe7uBaGkp-5wstNJygU93JZkROs3S_SvUonzpK-o0eZ2TfTCjjg6FUK2dtRl3KvPw3_ZFbcLbYe87qFFXrkXWTqHYptWn33r9nFsxxJS1w?testcase_id=5387371799642112 gc(); gc(); try { } catch(e) {; } function __f_4() { "use asm"; return {}; } __v_4 = __f_4(); Issue manually filed by: mmohammad See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Sep 19 2016
Cannot reproduce.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||
►
Sign in to add a comment |
|||
Comment 1 by mmohammad@chromium.org
, Sep 7 2016Owner: jarin@chromium.org
Status: Assigned (was: Untriaged)