Issue 707107 link

Starred by 1 user

Issue metadata

Status:	WontFix
Owner:	----
Closed:	May 2017
Cc:	tkent@chromium.org █ mrunal.k...@intel.com e...@chromium.org
EstimatedDays:	----
NextAction:	----
OS:	Linux
Pri:	2
Type:	Bug
Stability-Crash Reproducible Clusterfuzz M-59 Test-Predator-Wrong

CHECK failure: m_root.document().view()->isInPerformLayout() in SubtreeLayoutScope.cpp

Project Member Reported by ClusterFuzz, Mar 31 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6272922592477184

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  m_root.document().view()->isInPerformLayout() in SubtreeLayoutScope.cpp
  blink::SubtreeLayoutScope::SubtreeLayoutScope
  blink::LayoutView::layout
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=460627:460646

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv94n-V4bZqEcX33SMLy3t0sDlYOLOP76mdavmX0wryzaFemuVyH3u7EdV1yxhuBDtEt88NkXfIYfRCSzzPjcGQKvBbtMI-wueU7vWKLk_MKPcHgxiIQ8PnMBZ0vtYV0tEDkQN35wzuXkQWnCyWRYZe-FmYv7WvtW0vm0Av05vzYcfi3T2QcJQ946LmwkEFpy-H_J4JH75s7pehmELb4_1P9NjVSs0m87zk1l_hPU_XretXAyuh2bkNk-wge4qgSU0sT6lxJy9ydm-0BtgqNdi00sMCPpLs3GHeO7wdHNrHU8zdaSMhghb-LfO7rovPgh4D7_Fozovy3NCk5ddmbB5Y0yBFm8EJt26fkwWxsBjBKgWHtEG3FixRJMzb4pXU2K8mXeH-oqqAQxd4-HCVTkgV06tMS9dw?testcase_id=6272922592477184


Additional requirements: Requires HTTP

Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by msrchandra@chromium.org, Mar 31 2017

Cc: tkent@chromium.org mrunal.k...@intel.com
Labels: Test-Predator-Wrong M-59
Owner: e...@chromium.org
Status: Assigned (was: Untriaged)

Assigning to the reviewed owner as the commit's owner is not a chromium user using Code Search for the file, "SubtreeLayoutScope.cpp".
Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/f87b160ef34de0585a820a598cb75ce6ecdd1da9

Review URL#
https://codereview.chromium.org/2754723004

@eae -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by e...@chromium.org, Apr 3 2017

Cc: e...@chromium.org
Labels: -Pri-1 Pri-2
Owner: ----
Status: Available (was: Assigned)

That CL only changed the signature.

Project Member

Comment 3 by ClusterFuzz, May 3 2017

Status: WontFix (was: Available)

ClusterFuzz testcase 6272922592477184 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

►

Issue 707107 link

Issue metadata

CHECK failure: m_root.document().view()->isInPerformLayout() in SubtreeLayoutScope.cpp

Issue description

Comment 1 by msrchandra@chromium.org, Mar 31 2017

Comment 1 Deleted

Comment 2 by e...@chromium.org, Apr 3 2017

Comment 2 Deleted

Comment 3 by ClusterFuzz, May 3 2017

Comment 3 Deleted

Sign in to add a comment