Unreachable code in escape-analysis.cc |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5800259764879360 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_mipsel_dbg Platform Id: linux Crash Type: Unreachable code Crash Address: Crash State: escape-analysis.cc Regressed: V8: r39970:39971 Minimized Testcase (0.16 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97prCfuTxWO7J5EjDjDnLiPvDacRnIQ5_6MOetmS4sUr1IEfAb5-hQGUwC3kB0RLmylIMeysgkrF8Ix648KJhYwm7OJ0FkuOS2YmZJyZU9LKY9A-8toGVQgGVtpE67lVXjDXaNTDCeTBb1rA7V4FzZThEbPYQ?testcase_id=5800259764879360 try { } catch(e) {; } function __f_6() { var __v_7 = 0; for (var __v_6 = 0; __v_6 < 100000; __v_6++) { } return function() { return __v_7; } } __f_6()(); Issue manually filed by: titzer See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Oct 6 2016
ClusterFuzz has detected this issue as fixed in range 39984:39985. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5800259764879360 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_mipsel_dbg Platform Id: linux Crash Type: Unreachable code Crash Address: Crash State: escape-analysis.cc Regressed: V8: r39970:39971 Fixed: V8: r39984:39985 Minimized Testcase (0.16 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97prCfuTxWO7J5EjDjDnLiPvDacRnIQ5_6MOetmS4sUr1IEfAb5-hQGUwC3kB0RLmylIMeysgkrF8Ix648KJhYwm7OJ0FkuOS2YmZJyZU9LKY9A-8toGVQgGVtpE67lVXjDXaNTDCeTBb1rA7V4FzZThEbPYQ?testcase_id=5800259764879360 try { } catch(e) {; } function __f_6() { var __v_7 = 0; for (var __v_6 = 0; __v_6 < 100000; __v_6++) { } return function() { return __v_7; } } __f_6()(); See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 6 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||
►
Sign in to add a comment |
|||
Comment 1 by titzer@chromium.org
, Oct 5 2016Owner: jarin@chromium.org