Issue 688411 link

Starred by 1 user

Issue metadata

Status:	Duplicate
Owner:	r...@igalia.com
Closed:	Feb 2017
Cc:	█ msrchandra@chromium.org editing-dev@chromium.org
Components:	Blink>Editing>Spellcheck
EstimatedDays:	----
NextAction:	----
OS:	Windows
Pri:	1
Type:	Bug
Stability-Crash Reproducible Hotlist-SyzyASAN Clusterfuzz Test-Predator-Wrong

Crash in blink::HTMLElement::attributeChanged

Project Member Reported by ClusterFuzz, Feb 3 2017

Issue description

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5493035443159040

Fuzzer: miaubiz_css_fuzzer
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x000000cf
Crash State:
  blink::HTMLElement::attributeChanged
  blink::HTMLFormControlElement::attributeChanged
  blink::Element::didModifyAttribute
  
Memory Tool: SYZYASAN

Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_chrome&range=447949:447955

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv94XHW5WtHKyde8PLdVG4SVQxAs0bBNez0hNk5dNwJZLA8GUVm3Z9lZL8fHVDtS7HL04iVqbwqqFjIxVLfxFjClFLIgEh9wJSwWgzvJHyKbWUXFvebBxWwqFRm93LPZZwYuCxvIwnoC22ZQ0Q5QUWa20Lxg4vYogI0qQoOk5w38zNCEQnPl3lNfnmVz0TUouJJ9uOOcbquLpaYmOzdKNeXzLjAsE1F6-UL31rqFKEeMV0dl2qRpOeGc4h8viy4l5a3mlsydpXSbpi7N1duP1NZFDI0ikeh7FCSdCilWEbi46skpkoHGuuX_kGv3g7uootZejExmgZfwNXoVs2pOjVTLR8F0C9C_yHT2kFnVRFqJravqKPpzqMn79Mvdg5j5h-XitNv6KabqEpk5Jb0Cp3BGIoRVCVw?testcase_id=5493035443159040


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by msrchandra@chromium.org, Feb 3 2017

Cc: msrchandra@chromium.org
Components: Blink>HTML
Labels: Test-Predator-Wrong
Owner: r...@chromium.org
Status: Assigned (was: Untriaged)

Predator and CL did not find any possible suspects.
Using Code Search for the file, "htmlelement.cpp" assigning to the concern owner.

Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/5621cb109071401fc3cc9fc93e70955df0b7ae12

@rego -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by r...@chromium.org, Feb 6 2017

Components: -Blink>HTML Blink>Editing>Spellcheck
Mergedinto: 687984
Owner: r...@igalia.com
Status: Duplicate (was: Assigned)

►

Issue 688411 link

Issue metadata

Crash in blink::HTMLElement::attributeChanged

Issue description

Comment 1 by msrchandra@chromium.org, Feb 3 2017

Comment 1 Deleted

Comment 2 by r...@chromium.org, Feb 6 2017

Comment 2 Deleted

Sign in to add a comment