Detailed report: https://clusterfuzz.com/testcase?key=6574856276803584 Fuzzer: inferno_twister Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: position_cluster _hb_ot_shape_fallback_position hb_ot_position Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=434178:434216 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96ymOh6FEOuyMKWVvPV6Owna3fUXxxDvh7KBxJ1eIAcFfJeRiNHDxnzXxkJnCPY64TbG28XLOMjZqmwyxH0q98_NBoswn3EbQEz6q37jz_FnctrVqTyE-sYfv-k3To7o6pzgsSe82r-ITlxiuUD2yplYkRQl2eDVzI3uoKphaO_5S_PEenqgKb3kM3PL0qHPhDwRTHp5obMzjOK2hAvJxJBdT2SihQb_hIzLF6y4oSEHOaJS-BKHSEL6BewQchUFtMDHVQ6hVSSdFvVTu1cdhMzdX-cN36GdGFj_RlpluSBtXxr8pJsnID7lE53VRaK7pX0qQaeew7qxicJkemr0zcQb-s8N4tM_Fd8U69Jbcx3cFIsI-D9XEfyclXbffMV7tBVoK07TJ6_QapVTz09G8rb-kAxmw?testcase_id=6574856276803584 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Could not find exact culprit CL using predator and regression range. could someone please take a look?. Thank you.
ClusterFuzz has detected this issue as fixed in range 470545:470729. Detailed report: https://clusterfuzz.com/testcase?key=6574856276803584 Fuzzer: inferno_twister Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Integer-overflow Crash Address: Crash State: position_cluster _hb_ot_shape_fallback_position hb_ot_position Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=434178:434216 Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=470545:470729 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6574856276803584 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Comment 1 by mummare...@chromium.org
, Mar 20 2017Components: Blink>Fonts
Labels: Test-Predator-Wrong M-58