Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4736534097166336 Fuzzer: lcamtuf_cross_fuzz Job Type: linux_ubsan_vptr_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: i < size() in Vector.h blink::TransformBuilder::createTransformOperations blink::StyleBuilderConverter::convertTransformOperations Sanitizer: undefined (UBSAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_vptr_chrome&range=443258:443393 Minimized Testcase (5.45 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95L24GGUInRqHVQ1Xu5NQlQxAhewAXSClYGpklQNPI9BhBP9JZakuOB6GsTLt9TmqJx9C1fsGrp04B1Ws6el-oygKXtRjCtbTRdzEgyYUflfi-Z34zYpg8sN7MIzKTcEqAv6Pf3BvggWRvLwUGOa2h5ZKq2RSr33liPumVlbhvjtAG8DqmQsLgFkmHVfllmiGB5d4RpM5tuimcTexzKFa34mySwEfthISuO8HaJNx0Sza-O9BgnpK16ovshNriCPPtnt6v4DmcmStNIg3rfwlbuURdjysE7m6bLC3dy6c_1liqB29y97SbPAeZljxM1gDB9VNRM-sC6lHKx00UaYHqGJ0hDWOmBc9TIn2aZw-gIi-GsurQ?testcase_id=4736534097166336 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
As per issue 681356 , assigning to meade@. could you please take a look?. Thank you.
ClusterFuzz has detected this issue as fixed in range 445525:445725. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4736534097166336 Fuzzer: lcamtuf_cross_fuzz Job Type: linux_ubsan_vptr_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: i < size() in Vector.h blink::TransformBuilder::createTransformOperations blink::StyleBuilderConverter::convertTransformOperations Sanitizer: undefined (UBSAN) Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_vptr_chrome&range=445525:445725 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv96bSNELFk96MbXAgCV5M2Q3Jfs8uUWmhgiCfi1wCYk26OKqlEi8yxhc_7E5QAbAfAL7aJbIEuciyQzhyuLe0z9xFQDn2tm59JsvoDAryCoF4sHXCGE06m4-00Tx2ry7a_7USf4d6omHWcH1il8YuTBzorwLn8qW7Whq7NYx9wfImQUkioyGmAjUXyDDD3NHGewlnrupLOcwvtCmfqegI6rbnlX04tBx4jkMDFdVJ02twk2B4sRH0ID32XHRQ9EalfYIA5juL-4ymfEf91a7fl4YlUE9gDQb8CVn-_KDge2pKKNpQF5QGMlxA6ApWlU5IBEMLeDR-xdEkAvA1T76PTjAdQPEZ_P22Nmh5RmJ6mVQ4_sPH1E?testcase_id=4736534097166336 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
ClusterFuzz testcase 4736534097166336 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Comment 1 by mummare...@chromium.org
, Jan 18 2017Labels: Test-Predator-Wrong M-57
Owner: meade@chromium.org
Status: Assigned (was: Untriaged)