InsertParagraph command crashes when BR doesn't have visible position due to unusual styles |
|||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5944763839938560 Fuzzer: inferno_layout_test_unmodified Job Type: linux_ubsan_vptr_chrome Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: blink::Node::GetLayoutObject blink::InsertParagraphSeparatorCommand::DoApply blink::CompositeEditCommand::ApplyCommandToComposite Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_chrome&range=508795:508862 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5944763839938560 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Nov 2 2017
Predator and CL could not provide any possible suspects. Using the code search for the file, “InsertParagraphSeparatorCommand.cpp” assigning to concern owner from GIT revision log. Suspecting Commit# https://chromium.googlesource.com/chromium/src/+/b2c7a344d7f8ef4de77dd87428560a4da95f0918 @xiaochengh -- Could you please look into this issue, kindly reassign if it has nothing to do with the changes. Assigning the issue to the reviewer as unable to assign the issue to the actual suspect. Thank You.
,
Nov 2 2017
CreateVisiblePosition(Position::InParentAfterNode(*br)) failed to create a non-null VisiblePosition due to styles of <br> like 'visibility: collapse' that are not usually applied to <br>. Deprioritize to P3 since it's not regression.
,
Nov 7 2017
,
Nov 7 2017
,
Nov 7 2017
,
Dec 6 2017
ClusterFuzz has detected this issue as fixed in range 522010:522026. Detailed report: https://clusterfuzz.com/testcase?key=5944763839938560 Fuzzer: inferno_layout_test_unmodified Job Type: linux_ubsan_vptr_chrome Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: blink::Node::GetLayoutObject blink::InsertParagraphSeparatorCommand::DoApply blink::CompositeEditCommand::ApplyCommandToComposite Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_chrome&range=508795:508862 Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_chrome&range=522010:522026 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5944763839938560 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Dec 6 2017
ClusterFuzz testcase 5944763839938560 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by ClusterFuzz
, Nov 2 2017Labels: Test-Predator-AutoComponents