Detailed report: https://clusterfuzz.com/testcase?key=5216272976707584 Fuzzer: inferno_twister_custom_bundle Job Type: linux_msan_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: i < size() in Vector.h blink::PaintController::moveItemFromCurrentListToNewList blink::PaintController::copyCachedSubsequence Sanitizer: memory (MSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_msan_chrome&range=462610:462869 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96Y9UTDBvWV5LpapFvbgX_azuJiLofL082-bdMYSv6zpJ6zD2_F37FhvKCUWfUOLmkVUX9ifgIr0syIInKjMV6eazx73K3N-NY36rC0qZKVJMy7hDZ1SOz0bjDYdMxQWimqCyikLVNzmFrhXMtMwBxKSQ4gJGrUGTCIz1RfUFDAJMNQd3fJobc-F-CfQ7t0OaKtlKy-wImvCowvNHn5UvAj3ovXAI-RyQ381qzEXf_HqC2wT_GVpRMtTUuOHv0kJ75qp8nWzhZzrSBSOwTv4gO_QG3gkWm0H8Zht1MjRPkCUIh61P9PP0QtI4IGhZHrboFvc1IJ3dbB5aGMOH1Y8SvOGxFZykmKfZGFM8rNoEQ6d3ggbzo?testcase_id=5216272976707584 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
Through regression range suspected CL is https://chromium.googlesource.com/chromium/src/+/67161fd023615beeb90c01c878220b5485cd057c chrishtr@. could you please take a look?. Thank you.
ClusterFuzz has detected this issue as fixed in range 463791:463842. Detailed report: https://clusterfuzz.com/testcase?key=5216272976707584 Fuzzer: inferno_twister_custom_bundle Job Type: linux_msan_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: i < size() in Vector.h blink::PaintController::moveItemFromCurrentListToNewList blink::PaintController::copyCachedSubsequence Sanitizer: memory (MSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_msan_chrome&range=462610:462869 Fixed: https://clusterfuzz.com/revisions?job=linux_msan_chrome&range=463791:463842 Reproducer Testcase: https://clusterfuzz.com/download/AMIfv96Y9UTDBvWV5LpapFvbgX_azuJiLofL082-bdMYSv6zpJ6zD2_F37FhvKCUWfUOLmkVUX9ifgIr0syIInKjMV6eazx73K3N-NY36rC0qZKVJMy7hDZ1SOz0bjDYdMxQWimqCyikLVNzmFrhXMtMwBxKSQ4gJGrUGTCIz1RfUFDAJMNQd3fJobc-F-CfQ7t0OaKtlKy-wImvCowvNHn5UvAj3ovXAI-RyQ381qzEXf_HqC2wT_GVpRMtTUuOHv0kJ75qp8nWzhZzrSBSOwTv4gO_QG3gkWm0H8Zht1MjRPkCUIh61P9PP0QtI4IGhZHrboFvc1IJ3dbB5aGMOH1Y8SvOGxFZykmKfZGFM8rNoEQ6d3ggbzo?testcase_id=5216272976707584 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Comment 1 by mummare...@chromium.org
, Apr 11 2017Components: Blink>Paint
Labels: Test-Predator-Wrong M-59
Owner: chrishtr@chromium.org
Status: Assigned (was: Untriaged)