New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 765094 link

Starred by 3 users

Issue metadata

Status: Verified
Owner:
Closed: Oct 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Divide-by-zero in libGLESv2_swiftshader

Project Member Reported by ClusterFuzz, Sep 14 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5289255386742784

Fuzzer: inferno_twister_c
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Divide-by-zero
Crash Address: 0x2d6dd080
Crash State:
  libGLESv2_swiftshader
  Ordinal298
  Ordinal298
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=500372:500415

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5289255386742784

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Cc: msrchandra@chromium.org capn@chromium.org
Components: Internals>GPU>Internals
Labels: Test-Predator-Wrong-CLs M-63
Owner: npm@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.
Using Code Search for the file, "libGLESv2_swiftshader" assigning to the concern owner who might be related.

@npm -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

Comment 2 by npm@chromium.org, Sep 27 2017

Owner: piman@chromium.org
Sorry I was OOO. I'm not an owner of that. Assigning to an OWNER of gpu/command_buffer

Comment 3 by piman@chromium.org, Sep 27 2017

Cc: -capn@chromium.org piman@chromium.org
Components: -Internals>GPU>Internals Internals>GPU>SwiftShader
Owner: capn@chromium.org

Comment 4 by capn@chromium.org, Sep 27 2017

Cc: capn@chromium.org
 Issue 763351  has been merged into this issue.

Comment 5 by capn@chromium.org, Sep 27 2017

Owner: sugoi@chromium.org
Alexis, this looks like another issue that started after enabling WebGL 2 support for SwiftShader. Please have a look.

Comment 6 by piman@chromium.org, Sep 27 2017

Side note, would it make sense to exercise that path in gpu_fuzzer_swiftshader? Right now it uses CONTEXT_TYPE_OPENGLES2 for SwiftShader, but if it's now capable of ES3, we should switch to that like other gpu fuzzers (native GL, angle). It could give slightly more actionable bugs.
Project Member

Comment 7 by ClusterFuzz, Oct 1 2017

Components: Internals>GPU>Internals
Labels: Test-Predator-AutoComponents
Automatically applying components based on information from OWNERS files. If this seems incorrect, please apply the Test-Predator-Wrong-Components label.

Comment 8 by sugoi@chromium.org, Oct 3 2017

Fixed in SwiftShader here:
https://swiftshader-review.googlesource.com/#/c/SwiftShader/+/12648/

Will be in next DEPS roll.
Project Member

Comment 9 by bugdroid1@chromium.org, Oct 4 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/5955bc576d147925fb8966ca7b91a23f7c91591e

commit 5955bc576d147925fb8966ca7b91a23f7c91591e
Author: Alexis Hetu <sugoi@google.com>
Date: Wed Oct 04 01:03:13 2017

Roll SwiftShader bc6ce4f..9d56da2

https://swiftshader.googlesource.com/SwiftShader.git/+log/bc6ce4f..9d56da2

BUG= chromium:763382 , chromium:763384 , chromium:763435 , chromium:765094 , chromium:765791 , chromium:765939 

TBR=kbr@chromium.org

TEST=bots

CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.win:win_optional_gpu_tests_rel;master.tryserver.chromium.mac:mac_optional_gpu_tests_rel;master.tryserver.chromium.linux:linux_optional_gpu_tests_rel,linux_chromium_cfi_rel_ng;master.tryserver.chromium.android:android_optional_gpu_tests_rel

Change-Id: Idd52bdc26eba54615838baf5dc65705a8a4be631
Reviewed-on: https://chromium-review.googlesource.com/699156
Commit-Queue: Alexis Hétu <sugoi@chromium.org>
Reviewed-by: Alexis Hétu <sugoi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#506259}
[modify] https://crrev.com/5955bc576d147925fb8966ca7b91a23f7c91591e/DEPS

Project Member

Comment 10 by ClusterFuzz, Oct 4 2017

ClusterFuzz has detected this issue as fixed in range 506256:506287.

Detailed report: https://clusterfuzz.com/testcase?key=5289255386742784

Fuzzer: inferno_twister_c
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Divide-by-zero
Crash Address: 0x2c3df7c0
Crash State:
  libGLESv2_swiftshader
  Ordinal298
  Ordinal298
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=500372:500415
Fixed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=506256:506287

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5289255386742784

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 11 by ClusterFuzz, Oct 4 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5081168717545472 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
Labels: -Test-Predator-AutoComponents Test-Predator-Auto-Components

Sign in to add a comment