Issue metadata
Sign in to add a comment
|
Crash in v8::internal::Invoke |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5569069459963904 Fuzzer: mbarbella_js_mutation Job Type: windows_asan_d8 Platform Id: windows Crash Type: UNKNOWN Crash Address: 0x0070eea0 Crash State: v8::internal::Invoke _asan::QuickCheckForUnpoisonedRegion Recommended Security Severity: Medium Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=420859:421045 Minimized Testcase (0.10 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv94253iK7TVnovpVvy3DpOQ_1Y73vtt1H2fUlmuwhrWHJrZoYZq-t1xjeRdHBfSqZxEIbK3KIKtW5YmZM1Hrb9ysl8tyuI8oRyJjir3yPmJBLDyv4UBqBR3veVJOQc6UfzCbXXW0ShrIZbPIxhwrVgjybREDPg?testcase_id=5569069459963904 try { } catch(e) {; } __v_11 = [].entries().__proto__.__proto__[Symbol.iterator]; 1/__v_11(-1E-300); Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Sep 28 2016
This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Sep 28 2016
,
Sep 28 2016
,
Jan 4 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by sheriffbot@chromium.org
, Sep 28 2016