<unreachable> in AsmJsParser::GetVarInfo (asm-parser.cc:228) |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5393106282479616 Fuzzer: inferno_js_fuzzer Job Type: linux_asan_d8 Platform Id: linux Crash Type: Fatal error Crash Address: Crash State: NULL Sanitizer: address (ASAN) Regressed: V8: 45077:45078 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5393106282479616 Issue manually filed by: clemensh See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
May 5 2017
Cool. Thanks! Will take a look.
,
May 5 2017
The following revision refers to this bug: https://chromium.googlesource.com/v8/v8.git/+/2ed278f04a329c3fb62acb67ef4b08d8cb32fafd commit 2ed278f04a329c3fb62acb67ef4b08d8cb32fafd Author: Michael Starzinger <mstarzinger@chromium.org> Date: Fri May 05 12:45:53 2017 [asm.js] Fix checking of "fround" in parameter annotation. R=clemensh@chromium.org TEST=mjsunit/asm/regress-718745 BUG= chromium:718745 Change-Id: I4d31e90d7a2bbb1d07ce946682a95582f63c7e27 Reviewed-on: https://chromium-review.googlesource.com/497469 Reviewed-by: Clemens Hammacher <clemensh@chromium.org> Commit-Queue: Michael Starzinger <mstarzinger@chromium.org> Cr-Commit-Position: refs/heads/master@{#45134} [modify] https://crrev.com/2ed278f04a329c3fb62acb67ef4b08d8cb32fafd/src/asmjs/asm-parser.cc [add] https://crrev.com/2ed278f04a329c3fb62acb67ef4b08d8cb32fafd/test/mjsunit/asm/regress-718745.js
,
May 5 2017
,
May 6 2017
ClusterFuzz has detected this issue as fixed in range 45133:45134. Detailed report: https://clusterfuzz.com/testcase?key=5393106282479616 Fuzzer: inferno_js_fuzzer Job Type: linux_asan_d8 Platform Id: linux Crash Type: Fatal error Crash Address: Crash State: NULL Sanitizer: address (ASAN) Regressed: V8: 45077:45078 Fixed: V8: 45133:45134 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5393106282479616 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
||
►
Sign in to add a comment |
||
Comment 1 by clemensh@chromium.org
, May 5 2017Status: Assigned (was: Untriaged)
Summary: <unreachable> in AsmJsParser::GetVarInfo (asm-parser.cc:228) (was: <no crash state available>)