New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 764461 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Sep 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

ASSERT: false

Project Member Reported by ClusterFuzz, Sep 12 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6315368036696064

Fuzzer: libFuzzer_gpu_swiftshader_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  false
  es2::Device::stretchRect
  es2::Texture2D::generateMipmaps
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=478736:478797

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6315368036696064

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.
 
Cc: msrchandra@chromium.org kkaluri@chromium.org
Components: Internals>GPU
Labels: M-61 Test-Predator-Wrong
Owner: capn@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.
Using Code Search for the file, "Texture.cpp" assigning to the concern owner who might be related or worked on similar file.

capn@ -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by capn@chromium.org, Sep 13 2017

Cc: sugoi@chromium.org
Labels: -Pri-1 Pri-2
Thanks for reporting this. It looks like we might be attempting to create a mipmap from a 0x0 sized image. It's most probably benign, but I'll have a look at how to avoid that.
Project Member

Comment 3 by ClusterFuzz, Sep 16 2017

ClusterFuzz has detected this issue as fixed in range 502391:502452.

Detailed report: https://clusterfuzz.com/testcase?key=6315368036696064

Fuzzer: libFuzzer_gpu_swiftshader_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  false
  es2::Device::stretchRect
  es2::Texture2D::generateMipmaps
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=478736:478797
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=502391:502452

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6315368036696064

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 4 by ClusterFuzz, Sep 16 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6315368036696064 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment