Issue metadata
Sign in to add a comment
|
CHECK failure: map->IsMap() in spaces.cc |
||||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6257093802983424 Fuzzer: ochang_js_fuzzer Job Type: linux_asan_d8_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: map->IsMap() in spaces.cc v8::internal::NewSpace::Verify v8::internal::Heap::Verify Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_asan_d8_dbg&range=33916:33917 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6257093802983424 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Oct 15 2017
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/v8/v8/+/c2aa8f38b061aed593d0b9693e765912c9bbb11c ([runtime] Speed up allocating instances in the runtime by having a quick-check for inobject slack tracking.). If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
,
Oct 16 2017
,
Oct 16 2017
,
Oct 16 2017
,
Oct 17 2017
The following revision refers to this bug: https://chromium.googlesource.com/v8/v8.git/+/b0fc24503c5d34eb1386dae072890cbdd1bbd444 commit b0fc24503c5d34eb1386dae072890cbdd1bbd444 Author: Igor Sheludko <ishell@chromium.org> Date: Tue Oct 17 10:37:04 2017 Fix slack tracking for function subclasses. Bug: chromium:774860 Change-Id: I180ca7e9e8d8603e0d61deb0eb71d758895d0f74 Reviewed-on: https://chromium-review.googlesource.com/721551 Reviewed-by: Toon Verwaest <verwaest@chromium.org> Commit-Queue: Igor Sheludko <ishell@chromium.org> Cr-Commit-Position: refs/heads/master@{#48630} [modify] https://crrev.com/b0fc24503c5d34eb1386dae072890cbdd1bbd444/src/objects.cc [add] https://crrev.com/b0fc24503c5d34eb1386dae072890cbdd1bbd444/test/mjsunit/regress/regress-crbug-774860.js
,
Oct 17 2017
,
Oct 17 2017
,
Oct 18 2017
ClusterFuzz has detected this issue as fixed in range 48629:48630. Detailed report: https://clusterfuzz.com/testcase?key=6257093802983424 Fuzzer: ochang_js_fuzzer Job Type: linux_asan_d8_dbg Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: map->IsMap() in spaces.cc v8::internal::NewSpace::Verify v8::internal::Heap::Verify Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_asan_d8_dbg&range=33916:33917 Fixed: https://clusterfuzz.com/revisions?job=linux_asan_d8_dbg&range=48629:48630 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6257093802983424 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Oct 18 2017
ClusterFuzz testcase 6257093802983424 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 7 2017
,
Nov 7 2017
,
Jan 23 2018
This bug has been closed for more than 14 weeks. Removing security view restrictions. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot |
|||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||
Comment 1 by ClusterFuzz
, Oct 15 2017Labels: Test-Predator-AutoComponents