CHECK failure: false in paint_op_buffer.cc |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4932084467761152 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false in paint_op_buffer.cc base::debug::DebugBreak cc::DrawRecordOp::Deserialize Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=489446:489528 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4932084467761152 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Jul 26 2017
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/cc69a141bdfbc43f09ee54459f4a2ae740991197 commit cc69a141bdfbc43f09ee54459f4a2ae740991197 Author: Adrienne Walker <enne@chromium.org> Date: Wed Jul 26 20:43:04 2017 Make DrawRecordOp::Deserialize a silent failure Found by the fuzzer. This should just silently fail instead of asserting. Bug: 749017 Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel Change-Id: Ic34374cf12e2c5c9cdfc2e2e9de281e12d760ae2 Reviewed-on: https://chromium-review.googlesource.com/587248 Commit-Queue: enne <enne@chromium.org> Commit-Queue: Vladimir Levin <vmpstr@chromium.org> Reviewed-by: Vladimir Levin <vmpstr@chromium.org> Cr-Commit-Position: refs/heads/master@{#489746} [modify] https://crrev.com/cc69a141bdfbc43f09ee54459f4a2ae740991197/cc/paint/paint_op_buffer.cc
,
Jul 27 2017
ClusterFuzz has detected this issue as fixed in range 489690:489773. Detailed report: https://clusterfuzz.com/testcase?key=4932084467761152 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false in paint_op_buffer.cc base::debug::DebugBreak cc::DrawRecordOp::Deserialize Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=489446:489528 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=489690:489773 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4932084467761152 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 27 2017
ClusterFuzz testcase 4932084467761152 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||
►
Sign in to add a comment |
||
Comment 1 by msrchandra@chromium.org
, Jul 26 2017Labels: M-62 Test-Predator-Wrong
Owner: enne@chromium.org
Status: Assigned (was: Untriaged)