New issue
Advanced search Search tips

Issue 740694 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jul 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 1
Type: Bug



Sign in to add a comment

Ill in v8::Utils::ReportApiFailure

Project Member Reported by ClusterFuzz, Jul 10 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6345007341764608

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7f57cff835b8
Crash State:
  v8::Utils::ReportApiFailure
  v8::Utils::ApiCheck
  ToLocalChecked
  
Sanitizer: address (ASAN)

Regressed: V8: 46485:46486

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6345007341764608


Issue filed automatically.

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
 
Cc: neis@chromium.org adamk@chromium.org
Owner: gsat...@chromium.org
Status: Assigned (was: Untriaged)
Regression range and repro points to d9cb6135fe16e33278e369398d2bce8f885c31db.

Comment 2 by neis@chromium.org, Jul 12 2017

Cc: module-dev@chromium.org
Project Member

Comment 3 by bugdroid1@chromium.org, Jul 12 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f

commit ea632716d72cb87904e3d78ddb55a6c0c5f1d59f
Author: Sathya Gunasekaran <gsathya@chromium.org>
Date: Wed Jul 12 23:39:51 2017

[d8] Fix stack overflow when importing modules

Bug:  chromium:740694 
Cq-Include-Trybots: master.tryserver.chromium.linux:linux_chromium_rel_ng
Change-Id: Ib23bca1942c25d8a9f32e12be3f7b50fc3ab55c8
Reviewed-on: https://chromium-review.googlesource.com/568222
Commit-Queue: Sathya Gunasekaran <gsathya@chromium.org>
Reviewed-by: Adam Klein <adamk@chromium.org>
Cr-Commit-Position: refs/heads/master@{#46611}
[modify] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/include/v8.h
[modify] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/src/d8.cc
[modify] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/src/d8.h
[modify] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/src/isolate.cc
[modify] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/test/cctest/test-api.cc
[add] https://crrev.com/ea632716d72cb87904e3d78ddb55a6c0c5f1d59f/test/mjsunit/regress/regress-740694.js

Project Member

Comment 4 by ClusterFuzz, Jul 13 2017

ClusterFuzz has detected this issue as fixed in range 46610:46611.

Detailed report: https://clusterfuzz.com/testcase?key=6345007341764608

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7f57cff835b8
Crash State:
  v8::Utils::ReportApiFailure
  v8::Utils::ApiCheck
  ToLocalChecked
  
Sanitizer: address (ASAN)

Regressed: V8: 46485:46486
Fixed: V8: 46610:46611

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6345007341764608


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Jul 13 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6345007341764608 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
 Issue 742468  has been merged into this issue.
Project Member

Comment 7 by ClusterFuzz, Jul 14 2017

Labels: OS-Mac

Sign in to add a comment