Abrt in sk_abort_no_print |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5631010988621824 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x03e90000237e Crash State: sk_abort_no_print SkRRect::setRect SkClipStack::Element::initRect Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=489446:489528 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5631010988621824 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
,
Aug 5 2017
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/f82ae3b495ee05bc108286e65c751265db54f9b1 commit f82ae3b495ee05bc108286e65c751265db54f9b1 Author: Adrienne Walker <enne@chromium.org> Date: Sat Aug 05 02:40:32 2017 Validate deserialized rects in PaintOpBuffer Skia isn't happy about infinite or nan rects. Bug: 752487 Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel Change-Id: I318a7b04ca7089ceea02a971dae2d5a9c258f877 Reviewed-on: https://chromium-review.googlesource.com/602603 Reviewed-by: Vladimir Levin <vmpstr@chromium.org> Commit-Queue: enne <enne@chromium.org> Cr-Commit-Position: refs/heads/master@{#492220} [modify] https://crrev.com/f82ae3b495ee05bc108286e65c751265db54f9b1/cc/paint/paint_op_buffer.cc [modify] https://crrev.com/f82ae3b495ee05bc108286e65c751265db54f9b1/cc/paint/paint_op_buffer.h [modify] https://crrev.com/f82ae3b495ee05bc108286e65c751265db54f9b1/cc/paint/paint_op_buffer_unittest.cc
,
Aug 5 2017
ClusterFuzz has detected this issue as fixed in range 492164:492224. Detailed report: https://clusterfuzz.com/testcase?key=5631010988621824 Fuzzer: libFuzzer_paint_op_buffer_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x03e90000237e Crash State: sk_abort_no_print SkRRect::setRect SkClipStack::Element::initRect Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=489446:489528 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=492164:492224 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5631010988621824 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Aug 5 2017
ClusterFuzz testcase 5631010988621824 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||
►
Sign in to add a comment |
||
Comment 1 by enne@chromium.org
, Aug 4 2017Status: Assigned (was: Untriaged)