Stack-overflow in blink::ThreadState::CollectGarbage |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5505204182319104 Fuzzer: mbarbella_js_mutation_layout Job Type: windows_asan_content_shell Platform Id: windows Crash Type: Stack-overflow Crash Address: 0x18002000 Crash State: blink::ThreadState::CollectGarbage blink::ThreadState::ScheduleGCIfNeeded blink::NormalPageArena::OutOfLineAllocate Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=450818:452941 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5505204182319104 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Aug 18 2017
Predator could not provide any possible suspects. Assigning to concern owner from the CL -- https://chromium.googlesource.com/chromium/src/+log/8201abf336e367cdebf171d35332180ec59bcbac..03699d8bbd6a02680b989d4f018a247a7aa98110?pretty=fuller&n=10000 Suspecting Commit# https://chromium.googlesource.com/chromium/src/+/7c787e8cafaa3b13951ce38c76e0ebefb31ff454 Assigning to the reviewer @haraken -- Could you please look into the issue, kindly re-assign if this is not related to your changes. Thank You.
,
Aug 19 2017
ClusterFuzz has detected this issue as fixed in range 495542:495628. Detailed report: https://clusterfuzz.com/testcase?key=5505204182319104 Fuzzer: mbarbella_js_mutation_layout Job Type: windows_asan_content_shell Platform Id: windows Crash Type: Stack-overflow Crash Address: 0x18002000 Crash State: blink::ThreadState::CollectGarbage blink::ThreadState::ScheduleGCIfNeeded blink::NormalPageArena::OutOfLineAllocate Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=450818:452941 Fixed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=495542:495628 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5505204182319104 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Aug 19 2017
ClusterFuzz testcase 5505204182319104 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by manoranj...@chromium.org
, Aug 17 2017