Crash in v8::internal::HeapObject::SizeFromMap |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5220993552613376 Fuzzer: decoder_langfuzz Job Type: linux_asan_chrome_v8_d8 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::internal::HeapObject::SizeFromMap v8::internal::MarkCompactCollector::EmptyMarkingDeque v8::internal::Isolate::Iterate Regressed: V8: r40632:40642 Minimized Testcase (9.82 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96b60sKoTVjfd1l6aUCatI7I__h9PV7TfqW7SxUMw4HJ_lRAF6exzdE8tfLsOif88SAjt7e7s2UTaKrGEnGkeCnVWtID2Os3S41bdMyehS3KGkpa1tQQ0-BKhVv5S8GgpBP1KRNmn_OcwcqnTtrkjfGwv11fA?testcase_id=5220993552613376 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Oct 29 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||
►
Sign in to add a comment |
|||
Comment 1 by ClusterFuzz
, Oct 29 2016