CHECK failure: !node || IsElementOfType<const T>(*node) in Element.h |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5337647051702272 Fuzzer: ochang_domfuzzer Job Type: windows_asan_content_shell Platform Id: windows Crash Type: CHECK failure Crash Address: Crash State: !node || IsElementOfType<const T>(*node) in Element.h blink::HTMLDetailsElement::FindMainSummary blink::HTMLSummaryElement::IsMainSummary Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=434865:434922 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5337647051702272 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Sep 17 2017
,
Sep 18 2017
Predator could not provide any possible suspects. Using CL for the file, "HTMLDetailsElement.cpp" assigning to the concern owner who might be related or worked on similar file. Suspect CL : https://chromium.googlesource.com/chromium/src/+/2ce7841faa0fcfb4bff02b808745a9399a1c0603 tkent@ -- Could you please look into the issue, kindly re-assign if this is not related to your changes. Thank You.
,
Sep 18 2017
Using window.internals.youngestShadowRoot -> WontFix. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Sep 16 2017