New issue
Advanced search Search tips

Issue 650190 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 648063
Owner:
Closed: Sep 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Undefined-shift in ppparse

Project Member Reported by ClusterFuzz, Sep 26 2016

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6039490751889408

Fuzzer: libfuzzer_angle_translator_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Undefined-shift
Crash Address: 
Crash State:
  ppparse
  pp::ExpressionParser::parse
  pp::DirectiveParser::parseExpressionIf
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=420371:420478

Minimized Testcase (0.17 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95ynMJSNL1xHUEGfLwROOcsErOk6m8DiOebycKjw7FefCVesJIatM4Hs2UqyArVV1Pn_L1Y7varAcnIQ6kzPciuuQweNm3l4AnhNuOCBr2HF4_N9WfVesTf-D1I-J8MBl5IVoMFtLroIgb6btt9f_JHF9sJMQ?testcase_id=6039490751889408

Additional requirements: Requires Gestures

Issue manually filed by: kavvaru

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Components: Internals>GPU>ANGLE
Labels: Findit-for-crash M-55 Te-Logged
Owner: alokp@chromium.org
Status: Assigned (was: Untriaged)
	Git blame below is NOT necessarily who introduced the crash nor the owner for it. Please check the code before assigning to anyone.(No CL in the regression range changed the crashing files.)

Author: Jamie Madill
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/461e3af89f0f11bb10dd74db4b3513d1c45f9920
Time: Thu Jul 21 22:15:34 2016
The CL last changed line 1534 of file ExpressionParser.cpp, which is stack frame 0.

Author: alokp@chromium.org
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/04d7d22bb835408a82600244e09b9dcacbc0fa11
Time: Wed May 16 19:24:07 2012
The CL last changed line 1995 of file ExpressionParser.cpp, which is stack frame 1.

Author: Olli Etuaho
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/247374cba23b90c44b87875f0c38ee690618779e
Time: Wed Sep 09 12:07:24 2015
The CL last changed line 958 of file DirectiveParser.cpp, which is stack frame 2.

Author: alokp@chromium.org
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/d39ec4c15d6e656e027d7ded7ffceaafa0608e89
Time: Tue Jun 26 04:37:55 2012
The CL last changed line 925 of file DirectiveParser.cpp, which is stack frame 3.

Author: alokp@chromium.org
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/d39ec4c15d6e656e027d7ded7ffceaafa0608e89
Time: Tue Jun 26 04:37:55 2012
The CL last changed line 467 of file DirectiveParser.cpp, which is stack frame 4.

Author: alokp@chromium.org
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/d39ec4c15d6e656e027d7ded7ffceaafa0608e89
Time: Tue Jun 26 04:37:55 2012
The CL last changed line 284 of file DirectiveParser.cpp, which is stack frame 5.

Author: alokp@chromium.org
Project: chromium-angle
Changelist: https://chromium.googlesource.com/angle/angle.git/+/d39ec4c15d6e656e027d7ded7ffceaafa0608e89
Time: Tue Jun 26 04:37:55 2012
The CL last changed line 224 of file DirectiveParser.cpp, which is stack frame 6.

Suspected Project: chromium-angle
Suspected Component: Internals>GPU>ANGLE
========================

From the above find it tool information the changes made to the file "ExpressionParser.cpp" of frame 1 is more related to it.

alokp@ could you please look into this issue if it is related to your change,else please route this to an appropriate owner for this issue.

Thanks,
Cc: jmad...@chromium.org
Mergedinto: 648063
Owner: geoffl...@chromium.org
Status: Duplicate (was: Assigned)
I believe this was fixed already. Hopefully clusterfuzz will retry with a newer version and detect the fix.

Alok left the GPU team quite some time ago now.
Project Member

Comment 3 by ClusterFuzz, Oct 6 2016

ClusterFuzz has detected this issue as fixed in range 423278:423338.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6039490751889408

Fuzzer: libfuzzer_angle_translator_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Undefined-shift
Crash Address: 
Crash State:
  ppparse
  pp::ExpressionParser::parse
  pp::DirectiveParser::parseExpressionIf
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=420371:420478
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_ubsan&range=423278:423338

Minimized Testcase (0.17 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95ynMJSNL1xHUEGfLwROOcsErOk6m8DiOebycKjw7FefCVesJIatM4Hs2UqyArVV1Pn_L1Y7varAcnIQ6kzPciuuQweNm3l4AnhNuOCBr2HF4_N9WfVesTf-D1I-J8MBl5IVoMFtLroIgb6btt9f_JHF9sJMQ?testcase_id=6039490751889408

Additional requirements: Requires Gestures

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 4 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment