Suspected CLs	Git blame below is NOT necessarily who introduced the crash nor the owner for it. Please check the code before assigning to anyone.(No CL in the regression range changed the crashing files.)

Author: qiankun.miao
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/db975cd18716681f50db94d36120ba50148604fe
Time: Wed Jul 20 18:00:19 2016
The CL last changed line 234 of file framebuffer_manager.cc, which is stack frame 0.

Author: yunchao.he
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/faeb732edb9e057db922bc1d623dd0a543b91ca0
Time: Mon Sep 12 08:56:41 2016
The CL last changed line 7644 of file gles2_cmd_decoder.cc, which is stack frame 1.

Author: dongseong.hwang
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/5eaf06e85cbde57277e40d9775fe48fef473da60
Time: Thu Nov 06 19:59:07 2014
The CL last changed line 4485 of file gles2_cmd_decoder_autogen.h, which is stack frame 2.

Author: vmiura
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/8266ca7b30020175e2564b9760597672f7f3ad57
Time: Tue Sep 09 21:37:00 2014
The CL last changed line 5050 of file gles2_cmd_decoder.cc, which is stack frame 3.

Author: vmiura
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/8266ca7b30020175e2564b9760597672f7f3ad57
Time: Tue Sep 09 21:37:00 2014
The CL last changed line 53 of file cmd_parser.cc, which is stack frame 4.

Author: vmiura
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/8266ca7b30020175e2564b9760597672f7f3ad57
Time: Tue Sep 09 21:37:00 2014
The CL last changed line 61 of file command_executor.cc, which is stack frame 5.

Author: piman
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/5adadcfc2694ac8b90405f5b82a856adc542d83f
Time: Thu Jul 14 23:52:35 2016
The CL last changed line 211 of file fuzzer_main.cc, which is stack frame 6.

Suspected Project: chromium
Suspected Component: Internals>GPU>Internals

Possible suspect : https://chromium.googlesource.com/chromium/src/+/db975cd18716681f50db94d36120ba50148604fe

Please reassign if this is not related to your change.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6566929118789632

Fuzzer: afl_gpu_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000028
Crash State:
  gpu::gles2::GLES2DecoderImpl::DoBlitFramebufferCHROMIUM
  gpu::gles2::GLES2DecoderImpl::HandleBlitFramebufferCHROMIUM
  gpu::error::Error gpu::gles2::GLES2DecoderImpl::DoCommandsImpl<false>
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=afl_chrome_asan&range=417884:417900

Minimized Testcase (1.93 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95v2wE-2XRZ2WCYHSgOiuzXqBTOkVLAaAFv8vRtVxFTJ0yALJqXiu5g-pGsQ8cF938hIzMS9sfG9z3hp9XWQFsALYfTi0Dwe6WqGtnzvJF3NdNPJiBYJOmhgejGLzJl-W9DaAuk_jSzf4uMRoV7us4bwDC0DQ?testcase_id=6566929118789632

Additional requirements: Requires Gestures

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

ClusterFuzz has detected this issue as fixed in range 418964:419085.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6566929118789632

Fuzzer: afl_gpu_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000028
Crash State:
  gpu::gles2::GLES2DecoderImpl::DoBlitFramebufferCHROMIUM
  gpu::gles2::GLES2DecoderImpl::HandleBlitFramebufferCHROMIUM
  gpu::error::Error gpu::gles2::GLES2DecoderImpl::DoCommandsImpl<false>
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=afl_chrome_asan&range=417884:417900
Fixed: https://cluster-fuzz.appspot.com/revisions?job=afl_chrome_asan&range=418964:419085

Minimized Testcase (1.93 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95v2wE-2XRZ2WCYHSgOiuzXqBTOkVLAaAFv8vRtVxFTJ0yALJqXiu5g-pGsQ8cF938hIzMS9sfG9z3hp9XWQFsALYfTi0Dwe6WqGtnzvJF3NdNPJiBYJOmhgejGLzJl-W9DaAuk_jSzf4uMRoV7us4bwDC0DQ?testcase_id=6566929118789632

Additional requirements: Requires Gestures

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Actually I missed one of the cases, which should be fixed in https://codereview.chromium.org/2347063002

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/2b52c8624a013e7449e399527a8ee6ddce6aa7f8

commit 2b52c8624a013e7449e399527a8ee6ddce6aa7f8
Author: piman <piman@chromium.org>
Date: Sat Sep 17 00:49:08 2016

Fix crash in BlitFramebufferCHROMIUM with a null read buffer.

BUG= 646814 
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_optional_gpu_tests_rel;master.tryserver.chromium.mac:mac_optional_gpu_tests_rel;master.tryserver.chromium.win:win_optional_gpu_tests_rel

Review-Url: https://codereview.chromium.org/2344273003
Cr-Commit-Position: refs/heads/master@{#419351}

[modify] https://crrev.com/2b52c8624a013e7449e399527a8ee6ddce6aa7f8/gpu/command_buffer/service/gles2_cmd_decoder.cc
[modify] https://crrev.com/2b52c8624a013e7449e399527a8ee6ddce6aa7f8/gpu/command_buffer/service/gles2_cmd_decoder_unittest_framebuffers.cc

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot