Hang in hunspell_fuzzer |
|||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5189005827375104 Fuzzer: libfuzzer_hunspell_fuzzer Job Type: libfuzzer_chrome_msan Platform Id: linux Crash Type: Hang Crash Address: Crash State: hunspell_fuzzer Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=423366:423427 Minimized Testcase (0.10 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96kXUZFgz7aKlbe1i8qfqT9uN0oUzbgJHrTWSrdF6qMf_ULTcDdam-XTHhV5FucyhwN2lSgExmS2fC89n6cQxZYLvIMzZccjebe1KJyI_s1rhM2mwuYSc7JlF8lcbf5RtH_i6AsN8yJ6nW-i7t6KeWv3l6_ug?testcase_id=5189005827375104 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Feb 10 2017
Could someone please take a look?. Thank you.
,
Feb 13 2017
I synced to 55.0.2883.105, followed the instructions for Libfuzzer + MSan and the test ran successfully in 15s. I can try something else if someone has a suggestion.
,
Feb 15 2017
If the run-time of this test is based on wall clock, then something else running on the same core could easily push this past the time-out. We've upgraded Hunspell to 1.6.0, which includes many upstream and our own optimizations, in 57. I suspect that we don't want to back-port, so not sure what to do about this issue.
,
Feb 15 2017
If the runtime in 57 is significantly shorter than the 15s you reported, let's close it. If it isn't: Looking up a suggestion shouldn't take 15 seconds under MSan. Do we have an idea what's happening before the timeout?
,
Feb 15 2017
The time isn't much better in 57. The problem is that this particular fuzz is a word that is (I'm estimating) 90 chars long. (I'm sure you know) suggest() has these things it tries, like swapping each pair of chars, which for 90 chars would add up. According to callgrind, a single call to suggest() results in 12 million look-ups (for this test.)
,
Mar 16 2017
,
Apr 27 2017
,
Jun 7 2017
ClusterFuzz testcase 5189005827375104 is flaky and no longer reproduces, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by ajha@chromium.org
, Nov 22 2016