Issue metadata
Sign in to add a comment
|
Crash in v8::base::NoBarrier_Load |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5253116208611328 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::base::NoBarrier_Load v8::internal::HeapObject::map_word v8::internal::HeapObject::map Regressed: V8: r41367:41368 Minimized Testcase (0.10 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97IGCiwPEqT_yrbrJsZIzSfazrXklkOc4jooapYY4O4WdfiFkRBEWqRRjFJk-MrtheqxIaJ0ycKVyqJjzrPXE2ifQARWlfZ4s_A6hwpELjkLZN8sXba0MuDq5y3yFfnzJWm7NHXHaohrBY89zeYqQN-f0Aavg?testcase_id=5253116208611328 __v_0 = [{}]; function __f_0(__v_0) { __v_0.push(Infinity); } __v_0 = Array(100000); __f_0(__v_0); Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jan 5 2017
,
Jan 28 2017
ClusterFuzz has detected this issue as fixed in range 42726:42727. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5253116208611328 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8 Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: v8::base::NoBarrier_Load v8::internal::HeapObject::map_word v8::internal::HeapObject::map Sanitizer: address (ASAN) Regressed: V8: 41367:41368 Fixed: V8: 42726:42727 Minimized Testcase (0.10 Kb): Download: https://cluster-fuzz.appspot.com/download/AMIfv97IGCiwPEqT_yrbrJsZIzSfazrXklkOc4jooapYY4O4WdfiFkRBEWqRRjFJk-MrtheqxIaJ0ycKVyqJjzrPXE2ifQARWlfZ4s_A6hwpELjkLZN8sXba0MuDq5y3yFfnzJWm7NHXHaohrBY89zeYqQN-f0Aavg?testcase_id=5253116208611328 __v_0 = [{}]; function __f_0(__v_0) { __v_0.push(Infinity); } __v_0 = Array(100000); __f_0(__v_0); See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by hablich@chromium.org
, Dec 22 2016Status: Assigned (was: Untriaged)