New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 668781 link

Starred by 2 users

Issue metadata

Status: Duplicate
Merged: issue 667720
Owner:
Closed: Nov 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Crash in MakeWeak

Project Member Reported by ClusterFuzz, Nov 26 2016

Issue description

Comment 1 by ajha@chromium.org, Nov 27 2016

Components: Blink>JavaScript
Labels: M-57
Cc: msrchandra@chromium.org
Labels: Test-Predator-Wrong-CLs
Owner: u...@chromium.org
Status: Assigned (was: Untriaged)
Unable to find the possible suspect using Find it and CL.
Using Code Search for the file, "global-handles.cc" assigning to the concern owner.

Suspecting the following CL --
https://chromium.googlesource.com/v8/v8/+/566c825d4a7760351862b8bcfd59303442c1d635

@ulan -- Could you please look into the issue, kindly re-assign if this is not related to your change.
Thank You.

Comment 3 by u...@chromium.org, Nov 28 2016

Mergedinto: 667720
Status: Duplicate (was: Assigned)
Project Member

Comment 4 by ClusterFuzz, Nov 30 2016

ClusterFuzz has detected this issue as fixed in range 434929:434986.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6340411925987328

Fuzzer: lcamtuf_cross_fuzz
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  MakeWeak
  v8::internal::GlobalHandles::MakeWeak
  SetWeak
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=434385:434426
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=434929:434986

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97yxFe6X652vL4pKzDEffFwBHlE5L_pQvRcNKviCgFmf21KLef09bPvykl7oEhHOrQH7_qd9E4d6OmLs-LMqnvH4I8wVuZzHAFuVRi21p1NRiIjLaEE4KMISWyhYi5K4cfms7BthYJr14tzLlE3HRXZaLO0pqQn_IGH3syBOuCgs0vKW7g?testcase_id=6340411925987328


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Sign in to add a comment