New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 694495 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Feb 2017
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug

Blocked on:
issue 695292



Sign in to add a comment

Timeout in third_party_re2_fuzzer

Project Member Reported by ClusterFuzz, Feb 21 2017

Issue description

Cc: riso@google.com msrchandra@chromium.org junyer@google.com
Labels: Test-Predator-Correct-CLs M-58
Assigning to the concern owner from Predator results--
The result is a list of CLs that change the crashed files. 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/d8778253872afdde9536565400d38bb4defeeb85
Time: Sun Aug 07 11:44:17 2016
Lines 673 of file prog.cc which potentially caused crash are changed in this cl (frame #5, "re2::Prog::MarkSuccessors"). 

Lines 1211, 1223-1227 of file compile.cc which potentially caused crash are changed in this cl (frame #7, "re2::Compiler::Finish"; frame #9, "re2::Regexp::CompileToProg"). 

File re2.cc is changed in this cl (and is part of stack frame #10, "re2::RE2::Init"; frame #11, "re2::RE2::RE2")
Minimum distance from crash line to modified line: 0. (file: compile.cc, crashed on: 1211, modified: 1211). 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/7906344578cb22002cda5d6f7085d12959df2887
Time: Mon Feb 13 06:49:32 2017
Lines 672-703 of file prog.cc which potentially caused crash are changed in this cl (frame #5, "re2::Prog::MarkSuccessors"). 

Lines 1213 of file compile.cc which potentially caused crash are changed in this cl (frame #7, "re2::Compiler::Finish").
Minimum distance from crash line to modified line: 0. (file: compile.cc, crashed on: 1213, modified: 1213). 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/33114d19ec3acc1bed077c7091b255cc1b021604
Time: Fri May 13 05:21:31 2016
Lines 1213 of file compile.cc which potentially caused crash are changed in this cl (frame #7, "re2::Compiler::Finish").
Minimum distance from crash line to modified line: 0. (file: compile.cc, crashed on: 1213, modified: 1213). 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/565fcac8a79225d34f4573d15d103cca0992a27e
Time: Fri May 13 06:26:52 2016
Lines 1198 of file compile.cc which potentially caused crash are changed in this cl (frame #8, "re2::Compiler::Compile"). 

File prog.cc is changed in this cl (and is part of stack frame #5, "re2::Prog::MarkSuccessors"; frame #6, "re2::Prog::Flatten")
Minimum distance from crash line to modified line: 0. (file: compile.cc, crashed on: 1198, modified: 1198). 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/da1249d9b5f34f3f8170d07ee5869b510eb477d0
Time: Fri Sep 09 06:00:28 2016
Lines 233-240 of file re2.cc which potentially caused crash are changed in this cl (frame #10, "re2::RE2::Init"). 

File prog.cc is changed in this cl (and is part of stack frame #5, "re2::Prog::MarkSuccessors"; frame #6, "re2::Prog::Flatten")
Minimum distance from crash line to modified line: 0. (file: re2.cc, crashed on: 233, modified: 233). 

Author: Paul Wankadia
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/0c31e94bc0f8254fad960977d610b7560114ae34
Time: Wed Mar 02 02:52:19 2016
Lines 231-236 of file re2.cc which potentially caused crash are changed in this cl (frame #10, "re2::RE2::Init").
Minimum distance from crash line to modified line: 0. (file: re2.cc, crashed on: 231, modified: 231). 

Author: RIchard Kralovic
Project: chromium-re2
Changelist: https://chromium.googlesource.com/external/github.com/google/re2.git/+/eb00dfdd82015be22086cacc6bf830f72a10e2bc
Time: Tue Mar 01 15:25:15 2016
Lines 230-240 of file re2.cc which potentially caused crash are changed in this cl (frame #10, "re2::RE2::Init").
Minimum distance from crash line to modified line: 0. (file: re2.cc, crashed on: 230, modified: 230).


Suspecting Commit#
https://chromium.googlesource.com/external/github.com/google/re2.git/+/0c31e94bc0f8254fad960977d610b7560114ae34

@Paul Wankadia -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by junyer@google.com, Feb 22 2017

The reproducer testcase is \PS{940}…, which should have been rejected during parsing. Is Chromium fuzzing with -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION? (Please loop in kcc and mmoroz if necessary.)

Cc: kcc@chromium.org mmoroz@chromium.org
Adding few Devs as per Comment#2.
Thank You.

Comment 4 by junyer@google.com, Feb 23 2017

Ping, kcc! :)

Does Chromium need -DFUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION too?

Comment 5 by kcc@chromium.org, Feb 23 2017

Filed https://bugs.chromium.org/p/chromium/issues/detail?id=695292, 
hopefully Max or Oliver can handle it soon.

Comment 6 by mmoroz@chromium.org, Feb 23 2017

Blockedon: 695292
Cc: -mmoroz@chromium.org
Owner: mmoroz@chromium.org
Status: Assigned (was: Untriaged)

Comment 7 by mmoroz@chromium.org, Feb 23 2017

Looks like we also need to update re2 revision once again.
Project Member

Comment 11 by ClusterFuzz, Feb 24 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 4732288891092992 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment