New issue
Advanced search Search tips

Issue 726208 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: May 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

CHECK failure: new_memory->byte_length()->ToUint32(&mem_size) in wasm-debug.cc

Project Member Reported by ClusterFuzz, May 25 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5136618234314752

Fuzzer: inferno_js_fuzzer
Job Type: linux_ubsan_vptr_d8
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  new_memory->byte_length()->ToUint32(&mem_size) in wasm-debug.cc
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_d8&range=458409:458421

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5136618234314752


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Labels: -Pri-1 Pri-2
Owner: clemensh@chromium.org
Status: Assigned (was: Untriaged)
Dupe of 724846, re-enabled because of v8 revert for M60 branch.
Should be auto-fixed by enabling the v8 autoroller again.

Lowering priority, since this requires command-line flags.
Project Member

Comment 2 by ClusterFuzz, May 30 2017

ClusterFuzz has detected this issue as fixed in range 475250:475395.

Detailed report: https://clusterfuzz.com/testcase?key=5136618234314752

Fuzzer: inferno_js_fuzzer
Job Type: linux_ubsan_vptr_d8
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  new_memory->byte_length()->ToUint32(&mem_size) in wasm-debug.cc
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_d8&range=458409:458421
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_d8&range=475250:475395

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5136618234314752


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Status: Fixed (was: Assigned)

Sign in to add a comment