Stack-overflow in v8::internal::KeyedStoreIC::Store |
|||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5226655288393728 Fuzzer: mbarbella_js_mutation Job Type: windows_asan_d8 Platform Id: windows Crash Type: Stack-overflow Crash Address: 0x00622000 Crash State: v8::internal::KeyedStoreIC::Store v8::internal::Runtime_KeyedStoreIC_Miss v8::internal::Invoke Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=450818:452941 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5226655288393728 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
May 4 2017
Back to the CF triaging queue. Another "_alloca_probe" stack overflow.
,
May 5 2017
Assigning to Michi as discussed offline.
,
Jun 6 2017
,
Jun 7 2017
,
Jun 8 2017
,
Jul 30 2017
ClusterFuzz has detected this issue as fixed in range 490547:490630. Detailed report: https://clusterfuzz.com/testcase?key=5226655288393728 Fuzzer: mbarbella_js_mutation Job Type: windows_asan_d8 Platform Id: windows Crash Type: Stack-overflow Crash Address: 0x07452000 Crash State: v8::internal::KeyedStoreIC::Store v8::internal::Runtime_KeyedStoreIC_Miss v8::internal::Invoke Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=450818:452941 Fixed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=490547:490630 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5226655288393728 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 30 2017
ClusterFuzz testcase 5226655288393728 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by danno@chromium.org
, May 2 2017Status: Assigned (was: Untriaged)