Issue metadata
Sign in to add a comment
|
CHECK failure: !v8::internal::FLAG_enable_slow_asserts || (object->IsString()) in objects-inl.h |
||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5606041047007232 Fuzzer: inferno_js_fuzzer Job Type: linux_asan_d8_v8_arm_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: !v8::internal::FLAG_enable_slow_asserts || (object->IsString()) in objects-inl.h v8::internal::__RT_impl_Runtime_DynamicImportCall v8::internal::Runtime_DynamicImportCall Sanitizer: address (ASAN) Regressed: V8: 44550:44551 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5606041047007232 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jun 1 2017
This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jun 1 2017
,
Jun 2 2017
,
Jun 6 2017
,
Jun 6 2017
,
Jun 7 2017
Invalid test cases, uses the blacklisted flag "--harmony-dynamic-import". Blacklist has been fixed, this should not be reported again.
,
Jul 14 2017
ClusterFuzz testcase 5606041047007232 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
,
Sep 13 2017
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by sheriffbot@chromium.org
, Jun 1 2017