Issue metadata
Sign in to add a comment
|
!start.document()->view() || !start.document()->view()->needsLayout() in TextIte |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6083008258113536 Fuzzer: inferno_layout_test_unmodified Job Type: linux_debug_content_shell_drt Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: !start.document()->view() || !start.document()->view()->needsLayout() in TextIte blink::TextIteratorAlgorithm<>::TextIteratorAlgorithm blink::TextIteratorAlgorithm<>::rangeLength Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=415934:416233 Minimized Testcase (0.23 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96qaFOau6vGcJ9lsq5ANw_aBsGM0W45Z2KK6M8SjHICRElXq0L-hQm-DVc_SW_Lj9AdEe4yNmaaEBzgXSBj2pSa62cjvu7KL4uazbYpmUHcVmN24zybRuu_PL9MN7oIlsEBkh1MWQIppfDZZmHxDV0APZgB6g?testcase_id=6083008258113536 Issue manually filed by: ranjitkan See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Oct 11 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/e5e7e69014427cd09887d3a407e8cbb3059eb3b4 commit e5e7e69014427cd09887d3a407e8cbb3059eb3b4 Author: xiaochengh <xiaochengh@chromium.org> Date: Tue Oct 11 04:40:18 2016 Update layout in CompositeEditCommand::moveParagraphs for TextIterator::rangeLength A call site in CompositeEditCommand::moveParagraphs was missed when hoisting the layout update call from TextIterator::rangeLength. This patch hence adds back the missing call. BUG= 653819 TEST=n/a; this is a patch to an ongoing refactoring work Review-Url: https://codereview.chromium.org/2410513003 Cr-Commit-Position: refs/heads/master@{#424369} [modify] https://crrev.com/e5e7e69014427cd09887d3a407e8cbb3059eb3b4/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp
,
Oct 13 2016
ClusterFuzz has detected this issue as fixed in range 424153:424892. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6083008258113536 Fuzzer: inferno_layout_test_unmodified Job Type: linux_debug_content_shell_drt Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: !start.document()->view() || !start.document()->view()->needsLayout() in TextIte blink::TextIteratorAlgorithm<>::TextIteratorAlgorithm blink::TextIteratorAlgorithm<>::rangeLength Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=415934:416233 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=424153:424892 Minimized Testcase (0.23 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96qaFOau6vGcJ9lsq5ANw_aBsGM0W45Z2KK6M8SjHICRElXq0L-hQm-DVc_SW_Lj9AdEe4yNmaaEBzgXSBj2pSa62cjvu7KL4uazbYpmUHcVmN24zybRuu_PL9MN7oIlsEBkh1MWQIppfDZZmHxDV0APZgB6g?testcase_id=6083008258113536 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 13 2016
,
Oct 13 2016
Your change meets the bar and is auto-approved for M55 (branch: 2883)
,
Oct 13 2016
ClusterFuzz has detected this issue as fixed in range 424153:424892. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6083008258113536 Fuzzer: inferno_layout_test_unmodified Job Type: linux_debug_content_shell_drt Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: !start.document()->view() || !start.document()->view()->needsLayout() in TextIte blink::TextIteratorAlgorithm<>::TextIteratorAlgorithm blink::TextIteratorAlgorithm<>::rangeLength Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=415934:416233 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=424153:424892 Minimized Testcase (0.23 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96qaFOau6vGcJ9lsq5ANw_aBsGM0W45Z2KK6M8SjHICRElXq0L-hQm-DVc_SW_Lj9AdEe4yNmaaEBzgXSBj2pSa62cjvu7KL4uazbYpmUHcVmN24zybRuu_PL9MN7oIlsEBkh1MWQIppfDZZmHxDV0APZgB6g?testcase_id=6083008258113536 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 13 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/72c8cb209488038ea3564e40541bebd818cbc06e commit 72c8cb209488038ea3564e40541bebd818cbc06e Author: Xiaocheng Hu <xiaochengh@chromium.org> Date: Thu Oct 13 09:33:45 2016 Update layout in CompositeEditCommand::moveParagraphs for TextIterator::rangeLength A call site in CompositeEditCommand::moveParagraphs was missed when hoisting the layout update call from TextIterator::rangeLength. This patch hence adds back the missing call. BUG= 653819 TEST=n/a; this is a patch to an ongoing refactoring work Review-Url: https://codereview.chromium.org/2410513003 Cr-Commit-Position: refs/heads/master@{#424369} (cherry picked from commit e5e7e69014427cd09887d3a407e8cbb3059eb3b4) Review URL: https://codereview.chromium.org/2413223002 . Cr-Commit-Position: refs/branch-heads/2883@{#85} Cr-Branched-From: 614d31daee2f61b0180df403a8ad43f20b9f6dd7-refs/heads/master@{#423768} [modify] https://crrev.com/72c8cb209488038ea3564e40541bebd818cbc06e/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp
,
Oct 27 2016
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/72c8cb209488038ea3564e40541bebd818cbc06e commit 72c8cb209488038ea3564e40541bebd818cbc06e Author: Xiaocheng Hu <xiaochengh@chromium.org> Date: Thu Oct 13 09:33:45 2016 Update layout in CompositeEditCommand::moveParagraphs for TextIterator::rangeLength A call site in CompositeEditCommand::moveParagraphs was missed when hoisting the layout update call from TextIterator::rangeLength. This patch hence adds back the missing call. BUG= 653819 TEST=n/a; this is a patch to an ongoing refactoring work Review-Url: https://codereview.chromium.org/2410513003 Cr-Commit-Position: refs/heads/master@{#424369} (cherry picked from commit e5e7e69014427cd09887d3a407e8cbb3059eb3b4) Review URL: https://codereview.chromium.org/2413223002 . Cr-Commit-Position: refs/branch-heads/2883@{#85} Cr-Branched-From: 614d31daee2f61b0180df403a8ad43f20b9f6dd7-refs/heads/master@{#423768} [modify] https://crrev.com/72c8cb209488038ea3564e40541bebd818cbc06e/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp
,
Nov 4 2016
[Automated comment] removing mislabelled merge-merged-2840
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by ranjitkan@chromium.org
, Oct 7 2016Components: Tools>Test>FindIt>CorrectResult
Labels: -Pri-1 -Type-Bug Findit-for-crash M-55 Te-Logged Pri-2 Type-Bug-Regression
Owner: xiaoche...@chromium.org
Status: Assigned (was: Untriaged)