Issue 700693 link

Starred by 2 users

Issue metadata

Status:	Duplicate
Merged:	issue 641334
Owner:	----
Closed:	Mar 2017
Cc:	█ msten...@opera.com █ robho...@gmail.com
Components:	Blink>Layout
EstimatedDays:	----
NextAction:	----
OS:	Linux
Pri:	3
Type:	Bug
Stability-Crash Reproducible Clusterfuzz M-59 Test-Layout Test-Predator-Wrong

!floatingObject->originatingLine() in LayoutBlockFlowLine.cpp

Project Member Reported by ClusterFuzz, Mar 11 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5257108166803456

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !floatingObject->originatingLine() in LayoutBlockFlowLine.cpp
  blink::LayoutBlockFlow::linkToEndLineIfNeeded
  blink::LayoutBlockFlow::layoutRunsAndFloats
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_debug_content_shell_drt&range=268656:269696

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv95SxkhS_H7bCyaLnzZ2Krpn0p3uh86ZLJIrsoyp2yiipIoGxy9bOqh2OxxhYf0ylcEvcJvAyuBWlXcN2MVPa056Rhr6q6T0zc_ibjjUzdLdIqv5wzfBGnE8S2MWVsxZs7NcYKS1wBgTX0KL8-m0eHMeD9nYcs5LoguuP40whkcKO8TFTfr6FKMQGXCSt55gI0ivgEpg7nuprqL80C8eaVZC9vTzoZuNQimX1uOoHdZtJ3gWneZAmEhT6RPw-ynCWb5-BotY60obHoVnIB3EqpV6_b8K8W1pxhWvN0JxDvBCLvAtD81jcW-FwaU8ZHAH8biDMFj-OIr_-UOFNGCNvwCAXB3OvNA89gCffIA6WE9f7QlsxjU?testcase_id=5257108166803456


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by mummare...@chromium.org, Mar 14 2017

Components: Blink>Layout
Labels: Test-Layout Test-Predator-Wrong M-59
Owner: e...@chromium.org
Status: Assigned (was: Untriaged)

Suspected CL through code search on file LayoutBlockFlowLine.cpp,
https://chromium.googlesource.com/chromium/src/+/8683b364d376b33bed4cbfe6b46d2c39411b05cd
eae@, could you please take a look?.
Thank you

Comment 2 by e...@chromium.org, Mar 15 2017

Cc: robho...@gmail.com msten...@opera.com
Labels: -Pri-1 Pri-3
Owner: ----
Status: Available (was: Assigned)

Comment 3 by robho...@gmail.com, Mar 16 2017

Mergedinto: 641334
Status: Duplicate (was: Available)

►

Issue 700693 link

Issue metadata

!floatingObject->originatingLine() in LayoutBlockFlowLine.cpp

Issue description

Comment 1 by mummare...@chromium.org, Mar 14 2017

Comment 1 Deleted

Comment 2 by e...@chromium.org, Mar 15 2017

Comment 2 Deleted

Comment 3 by robho...@gmail.com, Mar 16 2017

Comment 3 Deleted

Sign in to add a comment