New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 754417 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Feb 2018
Cc:
█ msrchandra@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference READ in views::Widget::GetNativeView

Project Member Reported by ClusterFuzz, Aug 10 2017 
Detailed report: https://clusterfuzz.com/testcase?key=5160801727152128

Fuzzer: lcamtuf_cross_fuzz
Job Type: linux_asan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000038
Crash State:
  views::Widget::GetNativeView
  views::DesktopNativeWidgetAura::HandleActivationChanged
  views::DesktopWindowTreeHostX11::AfterActivationStateChanged
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5160801727152128

Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. If the fix resolved the issue, please close the bug by marking as Fixed.

Additional requirements: Requires Gestures

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by dtapu...@chromium.org, Aug 22 2017

Components: Internals>Views

Comment 2 by msrchandra@chromium.org, Sep 12 2017

Cc: msrchandra@chromium.org
Labels: Test-Predator-Wrong-CLs
Owner: michae...@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.
Using Code Search for the file, "widget.cc" assigning to concern owner.

Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/43e4ffc6324c5f76fa2dcf3ad1efc94a88b5a682

@michaelpg -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 3 by michae...@chromium.org, Sep 13 2017

Owner: ----
Status: Available (was: Assigned)
Can't be related to my change -- I only removed unused code.
Project Member

Comment 4 by ClusterFuzz, Oct 1 2017

Labels: Test-Predator-AutoComponents
Automatically applying components based on information from OWNERS files. If this seems incorrect, please apply the Test-Predator-Wrong-Components label.

Comment 5 by mbarbe...@chromium.org, Nov 7 2017

Labels: -Test-Predator-AutoComponents Test-Predator-Auto-Components
Project Member

Comment 6 by ClusterFuzz, Feb 23 2018

Status: WontFix (was: Available)
ClusterFuzz testcase 5160801727152128 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
►

Sign in to add a comment