New issue
Advanced search Search tips

Issue 656510 link

Starred by 2 users
Status: Duplicate
Merged: issue 656534
Owner:
e...@chromium.org
Closed: Oct 2016
Cc:
ajha@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Crash in blink::SVGLengthContext::convertValueFromCHSToUserUnits

Project Member Reported by ClusterFuzz, Oct 17 2016 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4863844671553536

Fuzzer: inferno_twister_custom_bundle
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000023
Crash State:
  blink::SVGLengthContext::convertValueFromCHSToUserUnits
  blink::SVGLengthContext::convertValueToUserUnits
  blink::SVGLength::value
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_chrome&range=425559:425561

Minimized Testcase (1.64 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95NwTa_2R-XcdnJPRpDFPrrgZaAT-f4fdXtt3_tdhLgqzNSihurTzfUIukI8KZxdAbjZni5yGJw8mZ_BTurB_9UnVTSAZqqhLSa2hmpN-w8pNlfoHCeFx5kMlmPi20rD4JjvxsQZvQugbgvrN8DlDmESbUBig?testcase_id=4863844671553536

Issue manually filed by: ajha

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by ajha@chromium.org, Oct 17 2016

Cc: ajha@chromium.org
Components: Tools>Test>FindIt>NoResult Blink>SVG
Labels: M-56 Te-Logged
Owner: e...@chromium.org
Status: Assigned (was: Untriaged)
Suspected CLs	Findit could not find any suspected CLs.

Suspected Project: chromium
=================================

Based on the code search on 'computedstyle.cpp' seeing recent changes by eae@ https://codereview.chromium.org/2416033003.

eae@: Could you please help in further investigation of this.

Thank you!

Comment 2 by e...@chromium.org, Oct 17 2016

Owner: ----
Status: Untriaged (was: Assigned)
Unrelated. Over to SVG for triage.

Comment 3 by e...@chromium.org, Oct 17 2016

Owner: e...@chromium.org
Status: Assigned (was: Untriaged)
Actually, might actually be related. Taking a look.

Comment 4 by e...@chromium.org, Oct 17 2016

Mergedinto: 656534
Status: Duplicate (was: Assigned)

Comment 5 by kateso...@chromium.org, Oct 18 2016

Components: -Tools>Test>FindIt>NoResult
Project Member

Comment 6 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
►

Sign in to add a comment