New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 735415 link

Starred by 1 user
Status: Assigned
Owner:
█ tanvir.r...@samsung.com
Last visit 16 days ago
Cc:
█ msrchandra@chromium.org
editing-dev@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 3
Type: Bug



Sign in to add a comment

InsertOrderedList crashes with DL

Project Member Reported by ClusterFuzz, Jun 21 2017 
Detailed report: https://clusterfuzz.com/testcase?key=5986200012980224

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  nextListChild != listChildNode (DD(editable)) in InsertListCommand.cpp
  blink::InsertListCommand::unlistifyParagraph
  blink::InsertListCommand::doApplyForSingleParagraph
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_debug_content_shell_drt&range=268656:269696

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5986200012980224


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

Comment 1 by msrchandra@chromium.org, Jun 21 2017

Cc: msrchandra@chromium.org
Labels: M-61 Test-Predator-Wrong
Owner: yosin@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL did not provide any possible suspects.
Using Code Search for the file, "InsertListCommand.cpp" assigning to the concern owner.

Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/ebadc5308f4a935c6e0ddec6fbb466e202913e30

@yosin -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by yosin@chromium.org, Jun 22 2017

Components: Blink>Editing>Command
Labels: -Pri-1 Pri-3
Owner: ----
Status: Available (was: Assigned)
Summary: InsertOrderedList crashes with DL (was: CHECK failure: nextListChild != listChildNode (DD(editable)) in InsertListCommand.cpp)
Lower to Pri-3, because real world usage of InsertOrderedList command is low.
Project Member

Comment 3 by ClusterFuzz, Jul 30 2017

Labels: Stability-Memory-AddressSanitizer
Detailed report: https://clusterfuzz.com/testcase?key=5901637817466880

Job Type: linux_debug_content_shell_drt
Crash Type: CHECK failure
Crash Address: 
Crash State:
  next_list_child != list_child_node (DD(editable)) in InsertListCommand.cpp
  blink::InsertListCommand::UnlistifyParagraph
  blink::InsertListCommand::DoApplyForSingleParagraph
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5901637817466880


See https://github.com/google/clusterfuzz-tools for more information.

Comment 4 by tanvir.r...@samsung.com, Feb 26 2018

Owner: tanvir.r...@samsung.com

Comment 5 by tanvir.r...@samsung.com, Feb 26 2018 

Unable to retrieve the test case. 

https://clusterfuzz.com/download?testcase_id=5986200012980224 says "Invalid"
and https://clusterfuzz.com/download?testcase_id=5901637817466880 doesnt gives the permission.
@msrchandra could you help ?

Comment 6 by benhenry@chromium.org, Aug 1

Status: Assigned (was: Available)
►

Sign in to add a comment