New issue
Advanced search Search tips

Issue 680538 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jan 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Crash in v8::internal::AstType::NowOf

Project Member Reported by ClusterFuzz, Jan 12 2017

Issue description

Components: Blink>JavaScript
Owner: ishell@chromium.org
Status: Assigned (was: Untriaged)
I have assigned this issue to ishell@ based on the previous  issue 654722 .
Thank you.
Project Member

Comment 3 by ClusterFuzz, Jan 13 2017

ClusterFuzz has detected this issue as fixed in range 442831:443258.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4859923608633344

Fuzzer: attekett_dom_fuzzer
Job Type: linux_asan_chrome_media
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  v8::internal::AstType::NowOf
  v8::internal::AstTyper::ObserveTypesAtOsrEntry
  v8::internal::AstTyper::VisitForStatement
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_media&range=441524:442831
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_media&range=442831:443258

Minimized Testcase (1.14 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94B1mVYVi9JSbTN5d8DpxwvfW2Vh-R6FXe18JMsbFMTEAnxm1_1XZ3C2Jy87WCxi5rBCYG37RKjqX6Cloy4M8AK2H_ypQlFWeU6_imkhhqPx0jlkiUrGpxt0mpfuS2wbGAAp_PxIUdfOK-6t-L9aOPPQ5pK1f3hj4PDUxUGnU9c4-6cULbJKX7NxKZdWQh1BCVR8m-YE3ef10Yr3TcxQF1hIO4OMfELMS_wHRq5y59A1bfIVvQnMuYTPWYZZesPj5sYnPxtzqCcSM63Z-17xq1zxMOuEOK1U515G71VV-uE7fChSvL7_Ger8z3uv5G63c_jYzwHm8qiuFsyCpbGljzY-OlOfpot4eIKd62sW1snLe6i6edpC5la1o1S2lBaF2gAlUyvs4OkpV0L2kDtUmu7kpVrUw?testcase_id=4859923608633344

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 4 by ClusterFuzz, Jan 13 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 4859923608633344 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment