Direct-leak in v8::internal::wasm::DecodeWasmModule |
|||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=6101207052713984 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_ignition_dbg Platform Id: linux Crash Type: Direct-leak Crash Address: Crash State: v8::internal::wasm::DecodeWasmModule v8::internal::wasm::CreateModuleObjectFromBytes v8::internal::AsmJs::ConvertAsmToWasm Regressed: V8: r40433:40434 Minimized Testcase (0.32 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv9402sY--QlpGprnFy-jLhVHM4xpeSr4eGaoOoX3b-L5EflyH9AUN750AZlIsyBQ0bVMm902TNWUVJCWOnInNV-Pqpu2T_gh3JL-sPPwTvgD625AvKY05Dc-kUINWU74Ami9SKjHyWAplKs8IBAZHO8yfsZB4A?testcase_id=6101207052713984 var __v_6 = {}; try { if (!__f_7()) {; } ; } catch(e) {; } function __f_3() { "use asm"; function __f_4() { } return {__f_4: __f_4}; } __f_3(); function __f_7() { "use asm"; function __f_4() { } return {__f_4: __f_4}; } function __f_15() { try { __f_15(); } catch(e) { __f_3(); } } __f_15(); Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 22 2016
Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Dec 1 2016
ClusterFuzz has detected this issue as fixed in range 41387:41388. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6101207052713984 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_ignition_dbg Platform Id: linux Crash Type: Direct-leak Crash Address: Crash State: v8::internal::wasm::DecodeWasmModule v8::internal::wasm::CreateModuleObjectFromBytes v8::internal::AsmJs::ConvertAsmToWasm Regressed: V8: r40433:40434 Fixed: V8: r41387:41388 Minimized Testcase (0.32 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv9402sY--QlpGprnFy-jLhVHM4xpeSr4eGaoOoX3b-L5EflyH9AUN750AZlIsyBQ0bVMm902TNWUVJCWOnInNV-Pqpu2T_gh3JL-sPPwTvgD625AvKY05Dc-kUINWU74Ami9SKjHyWAplKs8IBAZHO8yfsZB4A?testcase_id=6101207052713984 var __v_6 = {}; try { if (!__f_7()) {; } ; } catch(e) {; } function __f_3() { "use asm"; function __f_4() { } return {__f_4: __f_4}; } __f_3(); function __f_7() { "use asm"; function __f_4() { } return {__f_4: __f_4}; } function __f_15() { try { __f_15(); } catch(e) { __f_3(); } } __f_15(); See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Dec 1 2016
ClusterFuzz testcase is verified as fixed, closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by mstarzinger@chromium.org
, Nov 21 2016Owner: titzer@chromium.org
Status: Assigned (was: Untriaged)