New issue
Advanced search Search tips

Issue 761668 link

Starred by 1 user
Status: Duplicate
Merged: issue 735559
Owner:
jgruber@chromium.org
Closed: Sep 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Ill in v8::Utils::ReportOOMFailure

Project Member Reported by ClusterFuzz, Sep 3 2017 
Detailed report: https://clusterfuzz.com/testcase?key=6628991044943872

Fuzzer: libFuzzer_v8_regexp_parser_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7fc28e0cddb8
Crash State:
  v8::Utils::ReportOOMFailure
  v8::internal::V8::FatalProcessOutOfMemory
  v8::internal::Assembler::GrowBuffer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=405502:405670

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6628991044943872

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

Comment 1 by msrchandra@chromium.org, Sep 4 2017

Components: Blink>JavaScript
Labels: Test-Predator-Wrong-CLs M-61

Comment 2 by clemensh@chromium.org, Sep 4 2017

Owner: jgruber@chromium.org
Status: Assigned (was: Untriaged)
OOM in the regexp fuzzer.
Jakob, anything we can do about this?

Comment 3 by jgruber@chromium.org, Sep 4 2017

Mergedinto: 735559
Status: Duplicate (was: Assigned)
Thanks. This is a dupe of 735559. More context at https://crbug.com/v8/6515.
►

Sign in to add a comment