New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 713366 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
NOT IN USE
Closed: Apr 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Crash in WTF::Vector<blink::MIDIAccessInitializer::PortDescriptor,0,WTF::PartitionAllocat

Project Member Reported by ClusterFuzz, Apr 19 2017

Issue description

Components: Blink>Layout
Labels: Test-Layout Test-Predator-Wrong M-58
Owner: msten...@opera.com
Status: Assigned (was: Untriaged)
Through code search on file LayoutMultiColumnSet.cpp, suspected CL is
https://chromium.googlesource.com/chromium/src/+/1ade7ad316d84cfceaf7980c4d14bd79aaea0ebc
mstensho@, could you please take a look?
Thank you.
Project Member

Comment 2 by ClusterFuzz, Apr 20 2017

ClusterFuzz has detected this issue as fixed in range 449874:449877.

Detailed report: https://clusterfuzz.com/testcase?key=6432904747155456

Fuzzer: bj_broddelwerk
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x000000af
Crash State:
  WTF::Vector<blink::MIDIAccessInitializer::PortDescriptor,0,WTF::PartitionAllocat
  blink::LayoutMultiColumnSet::isPageLogicalHeightKnown
  blink::LayoutMultiColumnSet::newFragmentainerGroupsAllowed
  
Memory Tool: SYZYASAN

Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=449612:449627
Fixed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=449874:449877

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv95x2rKMMjaPXAjcY1j7YvvT8oD4lyZ8jqVp9NGBJb_hxn5pJOyEfLdOxSeh-_kWHDwMXocmJJ_fvbsi57rqKdSVae6gEYF_N5kX39iXUL33n78N2pxCezeTzdAxeofVI5MpsArRWqdT-gnq-V-evKnqtryFw-yajj9-zqzZO4BsJgShm9HUgtbcMfxPC9Sw0-JQupec7TurFgYKwvfJzu19YMguiaN5Njc0CDshOOBVZZ2v685jcpUFHltvSjMi_By2LvsYGAI5Zq2zKff5VPbqp2Qt7NkYwluy1RTL6E_-qN6nrv9YJ23uFmYrvgYV5uszcHZNqSU_GVc6bwOE_zZ7VLHuFiDOa5x_OwhUhfjuwXbNZGpuu-q0p_ednkDKcRdfSGVFIK4xwfnSgwsWeb6LXVgdKQ?testcase_id=6432904747155456


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 3 by ClusterFuzz, Apr 20 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6432904747155456 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment