Issue metadata
Sign in to add a comment
|
Crash in v8::internal::JSArrayBufferView::WasNeutered |
||||||||||||||||||||||
Issue descriptionDetailed report: https://cluster-fuzz.appspot.com/testcase?key=5161823453315072 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_mipsel_dbg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0beefdb6 Crash State: v8::internal::JSArrayBufferView::WasNeutered v8::internal::ElementsAccessorBase<v8::internal::TypedElementsAccessor< v8::internal::LookupIterator::State v8::internal::LookupIterator::LookupInRegula Sanitizer: address (ASAN) Recommended Security Severity: Medium Regressed: V8: 43517:43518 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97xPa-x7UGU1txJSNtqqsgEeNTI3XO_nDBtJSfdYJtTtI1jiYK2TsYO5UTq8eDhdWdeRWxlL-UNsqSCQPZwXiNhkfUaB_IFjT9Luwbqdjrrr9e6hVIs2CeQZtpbQj7h4eh08qUzwaDZJAt0cO22h4_ZGifW9qaP84PKV1Uz3SDAShF3hJQ6yY6wQzWTcNvasj04gTp_NJP4ZVz0YYmLl1Loj1QEa3j2FrvUNIeWKYWVsAqj_ncTccamwLghZgDz0DIojQJHtCYCZy1WfPEoUSTquyYoZANuCjCsj1kTghXiO3YqK4N27kUnazSssNz62DwM63qIpxqHI5e4Sg2zmzqQZZieFydT113atvcb_QmzAk1bfbgILmikMkyPA6wz0nIXNHkkVZMel69CgK1tasvtY88kvw?testcase_id=5161823453315072 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Mar 2 2017
ClusterFuzz has detected this issue as fixed in range 43519:43520. Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5161823453315072 Fuzzer: mbarbella_js_mutation Job Type: linux_asan_d8_v8_mipsel_dbg Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0beefdb6 Crash State: v8::internal::JSArrayBufferView::WasNeutered v8::internal::ElementsAccessorBase<v8::internal::TypedElementsAccessor< v8::internal::LookupIterator::State v8::internal::LookupIterator::LookupInRegula Sanitizer: address (ASAN) Recommended Security Severity: Medium Regressed: V8: 43517:43518 Fixed: V8: 43519:43520 Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97xPa-x7UGU1txJSNtqqsgEeNTI3XO_nDBtJSfdYJtTtI1jiYK2TsYO5UTq8eDhdWdeRWxlL-UNsqSCQPZwXiNhkfUaB_IFjT9Luwbqdjrrr9e6hVIs2CeQZtpbQj7h4eh08qUzwaDZJAt0cO22h4_ZGifW9qaP84PKV1Uz3SDAShF3hJQ6yY6wQzWTcNvasj04gTp_NJP4ZVz0YYmLl1Loj1QEa3j2FrvUNIeWKYWVsAqj_ncTccamwLghZgDz0DIojQJHtCYCZy1WfPEoUSTquyYoZANuCjCsj1kTghXiO3YqK4N27kUnazSssNz62DwM63qIpxqHI5e4Sg2zmzqQZZieFydT113atvcb_QmzAk1bfbgILmikMkyPA6wz0nIXNHkkVZMel69CgK1tasvtY88kvw?testcase_id=5161823453315072 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 2 2017
ClusterFuzz testcase 5161823453315072 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Mar 2 2017
,
Jun 8 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 28
|
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by vakh@chromium.org
, Mar 1 2017Owner: ahaas@chromium.org
Status: Available (was: Untriaged)