Predator could not provide any possible suspects.

Using the CL for the file, “query_manager.cc” assigning to concern owner for his recent work on this file.

Suspect CL : https://chromium.googlesource.com/chromium/src/+/106c0422016d35b03f80fbb40fe11146f75d3b20

piman@ -- Could you please look into this issue, kindly reassign if it has nothing to do with your changes.


Thank You.

I think the NOTREACHED is wrong, will fix.

Actually, NOTREACHED is right, we're missing some validation. Fix here: https://chromium-review.googlesource.com/c/chromium/src/+/742359

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/2a8a907a26d331973f68e3bf63ecd24ad8d652fd

commit 2a8a907a26d331973f68e3bf63ecd24ad8d652fd
Author: Antoine Labour <piman@chromium.org>
Date: Mon Oct 30 18:55:50 2017

Fix QueryCounter when target doesn't match query target

Bug:  778960 
Cq-Include-Trybots: master.tryserver.chromium.android:android_optional_gpu_tests_rel;master.tryserver.chromium.linux:linux_optional_gpu_tests_rel;master.tryserver.chromium.mac:mac_optional_gpu_tests_rel;master.tryserver.chromium.win:win_optional_gpu_tests_rel
Change-Id: Ic9db9a17fa7b7dea133673c0851bfa72b3f5ffff
Reviewed-on: https://chromium-review.googlesource.com/742359
Reviewed-by: Zhenyao Mo <zmo@chromium.org>
Commit-Queue: Antoine Labour <piman@chromium.org>
Cr-Commit-Position: refs/heads/master@{#512560}
[modify] https://crrev.com/2a8a907a26d331973f68e3bf63ecd24ad8d652fd/gpu/command_buffer/service/gles2_cmd_decoder.cc
[modify] https://crrev.com/2a8a907a26d331973f68e3bf63ecd24ad8d652fd/gpu/command_buffer/service/gles2_cmd_decoder_unittest.cc

ClusterFuzz has detected this issue as fixed in range 512553:512596.

Detailed report: https://clusterfuzz.com/testcase?key=6310647246880768

Fuzzer: libFuzzer_gpu_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  false in query_manager.cc
  gpu::gles2::CommandsCompletedQuery::QueryCounter
  gpu::gles2::QueryManager::QueryCounter
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=419732:419790
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=512553:512596

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6310647246880768

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6310647246880768 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.