Issue metadata
Sign in to add a comment
|
Data race in blink::ImageFrameGenerator::DecodeAndScale |
||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4977478589480960 Fuzzer: ochang_domfuzzer Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race READ 8 Crash Address: 0x7f4e60d10400 Crash State: blink::ImageFrameGenerator::DecodeAndScale blink::DecodingImageGenerator::onGetPixels SkImageGenerator::getPixels Sanitizer: thread (TSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=470763:470770 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4977478589480960 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
,
Jun 24 2017
ClusterFuzz has detected this issue as fixed in range 482055:482069. Detailed report: https://clusterfuzz.com/testcase?key=4977478589480960 Fuzzer: ochang_domfuzzer Job Type: linux_tsan_chrome_mp Platform Id: linux Crash Type: Data race READ 8 Crash Address: 0x7f4e60d10400 Crash State: blink::ImageFrameGenerator::DecodeAndScale blink::DecodingImageGenerator::onGetPixels SkImageGenerator::getPixels Sanitizer: thread (TSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=470763:470770 Fixed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=482055:482069 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4977478589480960 See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jun 24 2017
ClusterFuzz testcase 4977478589480960 is verified as fixed, so closing issue. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||
Comment 1 by ranjitkan@chromium.org
, Jun 9 2017Labels: -Type-Bug M-61 Test-Predator-Wrong Type-Bug-Regression
Owner: reed@chromium.org
Status: Assigned (was: Untriaged)