Float-cast-overflow in SkRect::roundOut |
||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=4986925812547584 Fuzzer: inferno_twister Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Float-cast-overflow Crash Address: Crash State: SkRect::roundOut blink::BaseRenderingContext2D::computeDirtyRect blink::BaseRenderingContext2D::clearRect Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=435261:438085 Minimized Testcase (0.19 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv95SZ1bXWJW9k5hQ4On5Uq8ctPprMZLphhhKDk-nEu94eeYXySB3bi-FMaRvMyVDnNZqnNEn4U4-ee_4uL1b-c-txevxsTwuKtCNjx7Zb8XiY3y0OWISTq7MZzutVVm24EZ_9MR-vMOdPcuV5VJVpi2pZLxhAQ?testcase_id=4986925812547584 <script> var canvas = document.createElement("canvas"); context = canvas.getContext("2d"); context.clearRect(0, 0, 4294967063, -17); </script> Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Dec 22 2016
ClusterFuzz has detected this issue as fixed in range 440242:440280. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4986925812547584 Fuzzer: inferno_twister Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Float-cast-overflow Crash Address: Crash State: SkRect::roundOut blink::BaseRenderingContext2D::computeDirtyRect blink::BaseRenderingContext2D::clearRect Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=435261:438085 Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=440242:440280 Minimized Testcase (0.19 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv95SZ1bXWJW9k5hQ4On5Uq8ctPprMZLphhhKDk-nEu94eeYXySB3bi-FMaRvMyVDnNZqnNEn4U4-ee_4uL1b-c-txevxsTwuKtCNjx7Zb8XiY3y0OWISTq7MZzutVVm24EZ_9MR-vMOdPcuV5VJVpi2pZLxhAQ?testcase_id=4986925812547584 <script> var canvas = document.createElement("canvas"); context = canvas.getContext("2d"); context.clearRect(0, 0, 4294967063, -17); </script> See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Dec 22 2016
ClusterFuzz testcase 4986925812547584 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||
►
Sign in to add a comment |
||
Comment 1 by msrchandra@chromium.org
, Dec 19 2016Labels: Test-Predator-Wrong-CLs
Owner: junov@chromium.org
Status: Assigned (was: Untriaged)