New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 762031 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 2
Type: Bug



Sign in to add a comment

pobfuzz: TessellatingPathOp -> split_edge oom

Project Member Reported by ClusterFuzz, Sep 5 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6720699589984256

Fuzzer: libFuzzer_paint_op_buffer_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  paint_op_buffer_fuzzer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=496894:496942

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6720699589984256

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Components: Internals>Skia
Labels: M-63

Comment 2 by enne@chromium.org, Sep 7 2017

Labels: -M-63 Pri-2

Comment 3 by enne@chromium.org, Sep 7 2017

Cc: senorblanco@chromium.org bsalomon@chromium.org enne@chromium.org
Status: Available (was: Untriaged)
Summary: pobfuzz: TessellatingPathOp -> split_edge oom (was: Out-of-memory in paint_op_buffer_fuzzer)
Project Member

Comment 4 by ClusterFuzz, Sep 16 2017

Labels: OS-Mac

Comment 5 Deleted

Comment 6 Deleted

Owner: senorblanco@chromium.org
Status: Assigned (was: Available)

Comment 8 by mmoroz@chromium.org, Oct 24 2017

For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md.

The link referenced in the description is no longer valid.
I can't get this to repro at r527520.

It doesn't even seem to get into the tessellating path renderer (turning on LOGGING_ENABLED in GrTessellator.cpp yields no output). Is it possible that the binary format of the serialized paintops has changed to the point that this file no longer loads?

Comment 10 by enne@chromium.org, Jan 10 2018

Yeah, things have definitely changed since October, sorry.

I am not 100% sure what revision you need to get to but you likely need to sync before khushal's patch here: https://chromium-review.googlesource.com/770522 in order to repro.
Status: Fixed (was: Assigned)
Rather than try to repro with an obsolete testcase, I'm going to close it and let ClusterFuzz find another. (I also suspect it will be fixed by https://skia.googlesource.com/skia/+/e40c3610e4b713eb652491b8524dd1d4db117c5a.)

Sign in to add a comment