New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 750253 link

Starred by 4 users

Issue metadata

Status: WontFix
Owner:
Closed: Apr 2018
Cc:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows , Mac
Pri: 1
Type: Bug

Blocking:
issue 584819



Sign in to add a comment

Timeout in hunspell_fuzzer

Project Member Reported by ClusterFuzz, Jul 28 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4677425790451712

Fuzzer: libFuzzer_hunspell_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Timeout (exceeds 25 secs)
Crash Address: 
Crash State:
  hunspell_fuzzer
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4677425790451712


Issue manually filed by: mmoroz

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 

Comment 1 by mmoroz@chromium.org, Jul 28 2017

Blocking: 584819
Cc: groby@chromium.org kcc@chromium.org mmoroz@chromium.org
Owner: k...@chromium.org
This issue happens in 88% of fuzzer runs: https://clusterfuzz.com/v2/performance-report/libFuzzer_hunspell_fuzzer/libfuzzer_chrome_asan/latest

It's a blocker for gaining new code coverage and performing an efficient continuous testing.

How is it possible that spellchecker needs more than 25 seconds to process 112 bytes of input?

Kevin and Rachel, could you please take a look or suggest another owner?
Project Member

Comment 2 by ClusterFuzz, Jul 28 2017

Labels: OS-Mac

Comment 3 by k...@chromium.org, Jul 31 2017

Hi Max,

Yes, the spellchecker really needs 25 seconds to do that test. The new version of hunspell has an n-squared algorithm for (iirc) finding a close match. We had talked about having it not bother even looking if the length was beyond a certain amount, but that would depend on language, etc. and we've handed over hunspell to another group. Perhaps Rachel could suggest a person.
Labels: Test-Predator-Correct-CLs
Status: Assigned (was: Untriaged)
Just to update, providing Predator results --
Regression information is not available. The result is the blame information. 

Author: tfarina
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/ea6469cb1f800b1795493822dbe932a03a51d554
Time: Fri May 01 00:31:43 2015
The CL last changed line 380 of file bdict_reader.cc, which is stack frame 3. 

Author: tfarina
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/ea6469cb1f800b1795493822dbe932a03a51d554
Time: Fri May 01 00:31:43 2015
The CL last changed line 753 of file bdict_reader.cc, which is stack frame 4. 

Author: tfarina
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/ea6469cb1f800b1795493822dbe932a03a51d554
Time: Fri May 01 00:31:43 2015
The CL last changed line 207 of file hashmgr.cxx, which is stack frame 5. 

Author: krb
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/047b36f906a4d3b957a2d7869eb41cdd74027fcb
Time: Tue Dec 13 15:41:23 2016
The CL last changed line 3659 of file affixmgr.cxx, which is stack frame 6. 

Author: krb
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/047b36f906a4d3b957a2d7869eb41cdd74027fcb
Time: Tue Dec 13 15:41:23 2016
The CL last changed line 1730 of file affixmgr.cxx, which is stack frame 7. 

Author: krb
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/047b36f906a4d3b957a2d7869eb41cdd74027fcb
Time: Tue Dec 13 15:41:23 2016
The CL last changed line 1627 of file suggestmgr.cxx, which is stack frame 8. 

Author: krb
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/047b36f906a4d3b957a2d7869eb41cdd74027fcb
Time: Tue Dec 13 15:41:23 2016
The CL last changed line 275 of file suggestmgr.cxx, which is stack frame 9.

Could some one please look into the issue and update.
Thank You.
Project Member

Comment 5 by ClusterFuzz, Aug 30 2017

Status: WontFix (was: Assigned)
ClusterFuzz testcase 4677425790451712 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Comment 6 by mmoroz@chromium.org, Sep 30 2017

Labels: ClusterFuzz-Wrong
Status: Available (was: WontFix)
Re-opening the issue as it seems to happen in 75% of runs: https://clusterfuzz.com/v2/performance-report/libFuzzer_hunspell_fuzzer/libfuzzer_chrome_asan/latest

We might consider limiting max length of the input.
Cc: msrchandra@chromium.org kkaluri@chromium.org k...@chromium.org
 Issue 767334  has been merged into this issue.

Comment 8 by mmoroz@chromium.org, Oct 24 2017

For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md.

The link referenced in the description is no longer valid.

(bulk edit)
Status: WontFix (was: Available)
We are closing all ooms and timeouts that are unreproducible. We won't be filing such bugs in future.
Project Member

Comment 10 by ClusterFuzz, Apr 24 2018

Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 11 by ClusterFuzz, Apr 24 2018

Labels: Needs-Feedback
ClusterFuzz testcase 5727464886894592 is still reproducing on tip-of-tree build (trunk).

If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase.

Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.

Comment 12 by k...@chromium.org, Apr 24 2018

Labels: ClusterFuzz-Ignore
Project Member

Comment 13 by ClusterFuzz, Oct 9

Labels: OS-Windows

Sign in to add a comment