Issue metadata
Sign in to add a comment
|
Fatal error in ../../src/asmjs/asm-wasm-builder.cc, line 1467 |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4848577450082304 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: Fatal error Crash Address: Crash State: NULL Regressed: V8: r41371:41372 Minimized Testcase (0.11 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv94XupkxOCBYe7-jPnATEJgGeIaW1GILy9z1E8aAK1qJ-VT87jb3-a_GgNidbtXT26KZVTpekFVu1iEwvJDW34_1Ui2-GxKz1fkbsbfxkBE0RZ2mtHeOF2JB7--WDSjdn_Dbg70_dG2EAf7ynkn9KEzU9q-F5Q?testcase_id=4848577450082304 function __f_1() { "use asm"; function __f_0() { nop(); } } (function __f_3() { ; return __f_1(); })(); Issue manually filed by: mstarzinger See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Nov 30 2016
Issue 669768 has been merged into this issue.
,
Jan 10 2017
,
Jan 10 2017
ClusterFuzz has detected this issue as fixed in range 42157:42158. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4848577450082304 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: Fatal error Crash Address: Crash State: NULL Sanitizer: address (ASAN) Regressed: V8: r41371:41372 Fixed: V8: r42157:42158 Minimized Testcase (0.11 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv94XupkxOCBYe7-jPnATEJgGeIaW1GILy9z1E8aAK1qJ-VT87jb3-a_GgNidbtXT26KZVTpekFVu1iEwvJDW34_1Ui2-GxKz1fkbsbfxkBE0RZ2mtHeOF2JB7--WDSjdn_Dbg70_dG2EAf7ynkn9KEzU9q-F5Q?testcase_id=4848577450082304 function __f_1() { "use asm"; function __f_0() { nop(); } } (function __f_3() { ; return __f_1(); })(); See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by mstarzinger@chromium.org
, Nov 30 2016Owner: bradnelson@chromium.org
Status: Assigned (was: Untriaged)
Summary: Fatal error in ../../src/asmjs/asm-wasm-builder.cc, line 1467 (was: <no crash state available>)