New issue
Advanced search Search tips

Issue 725440 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 724459
Owner:
Closed: May 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: WasmInstanceObject::IsWasmInstanceObject(*instance_obj) in runtime-test.cc

Project Member Reported by ClusterFuzz, May 23 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4786126975139840

Fuzzer: inferno_js_fuzzer
Job Type: linux_asan_d8_v8_mipsel_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  WasmInstanceObject::IsWasmInstanceObject(*instance_obj) in runtime-test.cc
  v8::internal::__RT_impl_Runtime_WasmNumInterpretedCalls
  v8::internal::Runtime_WasmNumInterpretedCalls
  
Sanitizer: address (ASAN)

Regressed: V8: 43854:43855

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4786126975139840


Issue manually filed by: clemensh

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Mergedinto: 724459
Owner: clemensh@chromium.org
Status: Duplicate (was: Untriaged)

Sign in to add a comment