New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 665386 link

Starred by 1 user

Issue metadata

Status: WontFix
Owner:
Closed: Jun 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 1
Type: Bug



Sign in to add a comment

Hang in hunspell_fuzzer

Project Member Reported by ClusterFuzz, Nov 15 2016

Issue description

Comment 1 by ajha@chromium.org, Nov 22 2016

Labels: M-55
Project Member

Comment 2 by sheriffbot@chromium.org, Nov 22 2016

Labels: -Restrict-View-EditIssue
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Cc: k...@chromium.org mummare...@chromium.org phajdan.jr@chromium.org groby@chromium.org
Components: UI>Browser>Spellcheck
Labels: Test-Predator-Wrong M-56
Could someone please take a look?.
Thank you.

Comment 4 by k...@chromium.org, Feb 13 2017

I synced to 55.0.2883.105, followed the instructions for Libfuzzer + MSan and the test ran successfully in 15s. I can try something else if someone has a suggestion.

Comment 5 by k...@chromium.org, Feb 15 2017

Cc: -k...@chromium.org
Owner: k...@chromium.org
Status: Assigned (was: Untriaged)
If the run-time of this test is based on wall clock, then something else running on the same core could easily push this past the time-out.

We've upgraded Hunspell to 1.6.0, which includes many upstream and our own optimizations, in 57. I suspect that we don't want to back-port, so not sure what to do about this issue.

Comment 6 by groby@google.com, Feb 15 2017

If the runtime in 57 is significantly shorter than the 15s you reported, let's close it.

If it isn't: Looking up a suggestion shouldn't take 15 seconds under MSan. Do we have an idea what's happening before the timeout? 

Comment 7 by k...@chromium.org, Feb 15 2017

The time isn't much better in 57. The problem is that this particular fuzz is a word that is (I'm estimating) 90 chars long. (I'm sure you know) suggest() has these things it tries, like swapping each pair of chars, which for 90 chars would add up. According to callgrind, a single call to suggest() results in 12 million look-ups (for this test.)
Project Member

Comment 8 by ClusterFuzz, Mar 16 2017

Labels: OS-Mac
Components: -UI>Browser>Spellcheck UI>Browser>Language>Spellcheck
Project Member

Comment 10 by ClusterFuzz, Jun 7 2017

Status: WontFix (was: Assigned)
ClusterFuzz testcase 5189005827375104 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment