New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 762363 link

Starred by 1 user
Status: WontFix
Owner:
dcheng@chromium.org
Closed: Oct 2017
Cc:
ikilpatrick@chromium.org
█ sandeepkumars@chromium.org
█ msrchandra@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 1
Type: Bug

Blocked on:
issue 721175


Sign in to add a comment

Stack-overflow in blink::TableLayoutAlgorithmAuto::FullRecalc

Project Member Reported by ClusterFuzz, Sep 6 2017 
Detailed report: https://clusterfuzz.com/testcase?key=4509521845420032

Fuzzer: inferno_layout_test_unmodified
Job Type: mac_asan_content_shell
Platform Id: mac

Crash Type: Stack-overflow
Crash Address: 0x7fff5c4abb18
Crash State:
  blink::TableLayoutAlgorithmAuto::FullRecalc
  blink::TableLayoutAlgorithmAuto::ComputeIntrinsicLogicalWidths
  blink::LayoutTable::ComputePreferredLogicalWidths
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_content_shell&range=497637:497650

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4509521845420032

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by sandeepkumars@chromium.org, Sep 6 2017

Cc: msrchandra@chromium.org sandeepkumars@chromium.org
Labels: Test-Predator-Wrong-CLs M-63
Owner: dcheng@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.
Using Code Search for the file, "TableLayoutAlgorithmAuto.cpp" assigning to the concern owner who might be related.

Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/5c60b348c30edbc1bc214674794b4ef2f6e9405d

@dcheng -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.
Project Member

Comment 2 by ClusterFuzz, Sep 10 2017

Labels: OS-Linux
Project Member

Comment 3 by ClusterFuzz, Oct 1 2017

Components: Blink>Layout
Labels: Test-Predator-AutoComponents
Automatically applying components based on information from OWNERS files. If this seems incorrect, please apply the Test-Predator-Wrong-Components label.

Comment 4 by dcheng@chromium.org, Oct 1 2017

Blockedon: 721175
Cc: ikilpatrick@chromium.org
Status: WontFix (was: Assigned)
This looks like a variant of overflowing the stack due to a deep layout tree. This isn't easy to resolve in the current architecture, though I'm told LayoutNG should make this possible (see issue 721175)

Comment 5 by mbarbe...@chromium.org, Nov 7 2017

Labels: -Test-Predator-AutoComponents Test-Predator-Auto-Components
►

Sign in to add a comment