Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6497699865296896 Fuzzer: lcamtuf_cross_fuzz Job Type: mac_asan_chrome Platform Id: mac Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: blink::getTypeExtension blink::Document::createElement blink::V8Document::createElementMethodCallbackForMainWorld Sanitizer: address (ASAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=446618:446638 Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94O6dZq_nOZ8CuoiCNR-799cbBSlWrCWK-i4SBUtBTeCY1g91qVVQMWoJ_hxEj8id4r8qBndF1-JhTSohwTzkE7y7svC7g04l5RVc7yANzy9gSy3EkBNnGeuzLQmEgIXoOS1t7im97kQBo4XvimfPsANzg_SYNh4W39FiyMlfv6TSAekvPHupE5X6E5HJVqtHTdjRfyeDkwp3fDtXodOpWiJuKk6PJpujZ_V_2n-coo-lZooJfzgGHLEmW4-HohGyPiKGN2jWy2gZy6mm73B93CbH5wJVaJi5anJILYOAqhRxjthmK0pMIGW8zhZJAxEyEnFzzfHAere5DY8f6WFLUrr9Mfh3jhMlsqBRDkvvWsWv7ULWA?testcase_id=6497699865296896 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
ClusterFuzz has detected this issue as fixed in range 447544:447851. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6497699865296896 Fuzzer: lcamtuf_cross_fuzz Job Type: mac_asan_chrome Platform Id: mac Crash Type: UNKNOWN READ Crash Address: 0x000000000000 Crash State: blink::getTypeExtension blink::Document::createElement blink::V8Document::createElementMethodCallbackForMainWorld Sanitizer: address (ASAN) Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=446618:446638 Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=447544:447851 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94O6dZq_nOZ8CuoiCNR-799cbBSlWrCWK-i4SBUtBTeCY1g91qVVQMWoJ_hxEj8id4r8qBndF1-JhTSohwTzkE7y7svC7g04l5RVc7yANzy9gSy3EkBNnGeuzLQmEgIXoOS1t7im97kQBo4XvimfPsANzg_SYNh4W39FiyMlfv6TSAekvPHupE5X6E5HJVqtHTdjRfyeDkwp3fDtXodOpWiJuKk6PJpujZ_V_2n-coo-lZooJfzgGHLEmW4-HohGyPiKGN2jWy2gZy6mm73B93CbH5wJVaJi5anJILYOAqhRxjthmK0pMIGW8zhZJAxEyEnFzzfHAere5DY8f6WFLUrr9Mfh3jhMlsqBRDkvvWsWv7ULWA?testcase_id=6497699865296896 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
ClusterFuzz testcase 6497699865296896 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Comment 1 by spqc...@chromium.org
, Jan 27 2017