New issue
Advanced search Search tips

Issue 686277 link

Starred by 2 users
Status: Duplicate
Merged: issue 685680
Owner:
tebbi@chromium.org
Closed: Jan 2017
Cc:
bmeu...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Crash in base::win::ForceCrashOnSigAbort

Project Member Reported by ClusterFuzz, Jan 27 2017 
Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5211392459407360

Fuzzer: meacer_chromebot_extensions
Job Type: windows_asan_chrome_no_sandbox
Platform Id: windows

Crash Type: UNKNOWN WRITE
Crash Address: 0x00000000
Crash State:
  base::win::ForceCrashOnSigAbort
  v8::internal::compiler::EscapeStatusAnalysis::CheckUsesForEscape
  v8::internal::compiler::EscapeStatusAnalysis::Process
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_chrome_no_sandbox&range=446318:446606

Minimized Testcase (121.77 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95421SVm-6TIDNTvfcMDBpSPrL8cajShIV7ucIVUU0D0x7qdbcUNHxBaH_9MV7-YoHYtG0_obao2qgfhvWy-7hoVe-lnpNpQZ6mg4gK5aNeoh0PX5io5MtgjD-1E0vM3QbWWjYaZ8cgyjlY1S19efVecmAXu1FqFJeOdOJ5GETnxluGIFYMMxcFLFhwUcwxooRLCnr2N1Z78fDQjzFrh0stonSJW5MWCLyAohp3Zlb74uq-snHMtMXd3eCLLHb_7xF945mi5Zzry8NlhU9DQFjsTfeQQXmHMwDNFZuHNPPJUB16oT9WPpY3AySkgGV4eWyI1jNoxUZJOQn2sDDCcdinNThnyi2I1Bn73nrB-59g7OWYQWs?testcase_id=5211392459407360

Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by mummare...@chromium.org, Jan 28 2017

Components: Internals
Labels: Test-Predator-Wrong M-58
Owner: tebbi@chromium.org
Status: Assigned (was: Untriaged)
Through code search on file escape-analysis.cc, recently touched code escape analysis by tebbi@.
https://chromium.googlesource.com/v8/v8/+/e225251f256472562e1fc79feec2d7203b15e443
could you please take a look and help us to find correct owner if it is not related your changes.

Comment 2 by mummare...@chromium.org, Jan 28 2017

Cc: bmeu...@chromium.org
Components: Blink>JavaScript

Comment 3 by tebbi@chromium.org, Jan 31 2017

Mergedinto: 685680
Status: Duplicate (was: Assigned)
►

Sign in to add a comment