Author: Cary Clark
Project: chromium-skia
Changelist: https://chromium.googlesource.com/skia.git/+/e47ae2998c1cf944db5743a416583dd0f042b6d9
Time: Wed Oct 05 12:51:39 2016
Lines 316-319 of file SkPathOpsCommon.cpp which potentially caused crash are changed in this cl (frame #3, "HandleCoincidence").

@caryclark: Assigning to you, request you to please take a look into it. Please help us to reassign if not with respect to your change.

Thanks.!

The following revision refers to this bug:
  https://skia.googlesource.com/skia.git/+/40f23780e7ca36818660add0faf783fda81bf0b1

commit 40f23780e7ca36818660add0faf783fda81bf0b1
Author: Cary Clark <caryclark@google.com>
Date: Thu Oct 06 16:04:16 2016

fuzzer fix

Error out when fuzzing
conditions are met.

Also, make degenerate
input line ends consistent.

TBR=reed@google.com
BUG= 653452 ,  626164 , skia:5829

GOLD_TRYBOT_URL= https://gold.skia.org/search?issue=3048

Change-Id: I23a01adde9dec07b54d66ab2418b3ea0b96e4456
Reviewed-on: https://skia-review.googlesource.com/3048
Commit-Queue: Cary Clark <caryclark@google.com>
Reviewed-by: Cary Clark <caryclark@google.com>

[modify] https://crrev.com/40f23780e7ca36818660add0faf783fda81bf0b1/src/pathops/SkOpCoincidence.cpp
[modify] https://crrev.com/40f23780e7ca36818660add0faf783fda81bf0b1/src/pathops/SkOpCoincidence.h
[modify] https://crrev.com/40f23780e7ca36818660add0faf783fda81bf0b1/src/pathops/SkOpEdgeBuilder.cpp
[modify] https://crrev.com/40f23780e7ca36818660add0faf783fda81bf0b1/src/pathops/SkPathOpsCommon.cpp
[modify] https://crrev.com/40f23780e7ca36818660add0faf783fda81bf0b1/tests/PathOpsOpTest.cpp

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/c243409f8f9f7cfcae4264c1b1884cbef4feef3c

commit c243409f8f9f7cfcae4264c1b1884cbef4feef3c
Author: skia-deps-roller <skia-deps-roller@chromium.org>
Date: Fri Oct 07 21:11:33 2016

Roll src/third_party/skia/ d207884bf..221a4bb55 (21 commits).

https://chromium.googlesource.com/skia.git/+log/d207884bf5d1..221a4bb55b51

$ git log d207884bf..221a4bb55 --date=short --no-merges --format='%ad %ae %s'
2016-10-07 caryclark fix fuzz busters
2016-10-07 mtklein SkRasterPipeline: 8x pipelines, attempt 2
2016-10-07 senorblanco GrTessellator: refactor Line out of Edge.
2016-10-07 bungeman Whitespace change to kick build.
2016-10-07 jvanverth Reduce geometry size for circles to help fill rate.
2016-10-07 stephana Disable svgs on nanobench when running on Valgrind
2016-10-07 mtklein Revert "SkRasterPipeline: 8x pipelines"
2016-10-06 robertphillips Disable antialiasing on interior of filled RRects that need distance vectors
2016-10-06 mtklein SkRasterPipeline: 8x pipelines
2016-10-06 fmalita Assorted Android fixes
2016-10-05 bungeman Auto re-gen for gn cmake generator.
2016-10-06 robertphillips Add distance values to interior of filled RRects
2016-10-06 fmalita Harden SkPicturePlayback::handleOp() skips
2016-10-06 egdaniel Fix Vulkan orientation during screne rotations
2016-10-06 herb Fix SkDeferredCanvas for use on android.
2016-10-06 caryclark remove sprintf
2016-10-06 mtklein Make load4 and store4 part of SkNx properly.
2016-10-06 caryclark fuzzer fix
2016-10-06 reed fix other printf warning for SkBlendMode
2016-10-06 caryclark fix mac all build
2016-10-06 xidachen Fix SkPath::arcTo when sweepAngle is tiny and radius is big

BUG= 653452 , 626164 , 640031 

CQ_INCLUDE_TRYBOTS=master.tryserver.blink:linux_precise_blink_rel
TBR=stephana@google.com

Review-Url: https://codereview.chromium.org/2405553002
Cr-Commit-Position: refs/heads/master@{#423965}

[modify] https://crrev.com/c243409f8f9f7cfcae4264c1b1884cbef4feef3c/DEPS

ClusterFuzz has detected this issue as fixed in range 423932:423977.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5376818452627456

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  starter
  SkOpCoincidence::addOverlap
  SkOpCoincidence::findOverlaps
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=423149:423180
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=423932:423977

Minimized Testcase (0.35 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97WZ7BmRVYCTlKZa7OZD6qNqBZk1LM0ceSqcV5OB80qK83bjVtO5kQL2x05nJxH-uRRiZE0sLsT6wEHllcpwFsCAMdKbGtwreTcaCry_ZV0I1TCpic8t10mwh3N9Fz61SAUDuQ7_c0ziUx98KU-6hhv-gxDbA?testcase_id=5376818452627456

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot