New issue
Advanced search Search tips

Issue 782186 link

Starred by 2 users

Issue metadata

Status: Fixed
Owner:
Closed: Nov 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Windows
Pri: 1
Type: Bug



Sign in to add a comment

Breakpoint in content::RenderThreadImpl::RequestNewLayerTreeFrameSink

Project Member Reported by ClusterFuzz, Nov 7 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5241963845779456

Fuzzer: inferno_layout_test_unmodified
Job Type: windows_asan_content_shell
Platform Id: windows

Crash Type: Breakpoint
Crash Address: 0xfeb9a080
Crash State:
  content::RenderThreadImpl::RequestNewLayerTreeFrameSink
  content::RenderWidget::RequestNewLayerTreeFrameSink
  content::RenderWidgetCompositor::RequestNewLayerTreeFrameSink
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=514242:514325

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5241963845779456

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Nov 7 2017

Components: Internals>Compositing Internals>Core
Labels: Test-Predator-AutoComponents
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Nov 7 2017

Labels: Test-Predator-AutoOwner
Owner: danakj@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/946e3173ce19c18e805b4fbb2218cb7149429793 (Do LOG(FATAL) if layout tests fall out of gpu compositing.).

If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
Cc: sugoi@chromium.org infe...@chromium.org danakj@chromium.org piman@chromium.org mmoroz@chromium.org enne@chromium.org
 Issue 780757  has been merged into this issue.
Owner: mmoroz@chromium.org
All context for this is in https://bugs.chromium.org/p/chromium/issues/detail?id=780757

Need to make these bots use --use-gl=swiftshader to allow gpu compositing to work. Currently it doesn't work on the bots, which is a pre-req for layout tests.
Status: Started (was: Assigned)
Cc: och...@chromium.org mbarbe...@chromium.org
I applied the following changes:

1)
APP_ARGS: --use-gl=osmesa  ->  --use-gl=swiftshader
REQUIRED_APP_ARGS: --use-gl=any  ->  --use-gl=swiftshader

for the following job template:
- linux_asan_chrome


2)
APP_ARGS: --use-gl=any  ->  --use-gl=swiftshader
REQUIRED_APP_ARGS: --use-gl=any  ->  --use-gl=swiftshader


for the following job types:
- linux_asan_chrome_ipc
- linux_asan_chrome_ipc_32bit
- linux_asan_chrome_v8_arm
- linux_asan_content_shell
- linux_asan_content_shell_drt
- linux_cfi_chrome
- linux_asan_flash_disabled
- linux_cfi_chrome_ipc
- linux_debug_chrome
- linux_debug_content_shell_drt
- linux_lsan_chrome_mp
- linux_msan_chrome_ipc
- linux_official_chrome_disabled
- linux_ubsan_chrome
- linux_ubsan_vptr_chrome
- linux_ubsan_vptr_content_shell_drt
- windows_asan_chrome
- windows_asan_chrome_ipc
- windows_asan_chrome_no_sandbox
- windows_asan_content_shell
- windows_official_chrome_disabled
- windows_syzyasan_chrome
- windows_syzyasan_content_shell


Project Member

Comment 7 by ClusterFuzz, Nov 7 2017

ClusterFuzz is analyzing your testcase. Developers can follow the progress at https://clusterfuzz.com/testcase?key=5132173744275456.
Re-uploaded the same input against the same job type: https://clusterfuzz.com/v2/testcase-detail/5132173744275456
Status: Fixed (was: Started)
Alright, it didn't crash with --use-gl=swiftshader flag.
Cool, thanks. :)
Labels: Test-Predator-Auto-CC
Labels: -Test-Predator-AutoComponents Test-Predator-Auto-Components
Labels: -Test-Predator-AutoOwner Test-Predator-Auto-Owner
Labels: -Test-Predator-Auto-CC
Project Member

Comment 15 by ClusterFuzz, Nov 14 2017

Labels: Needs-Feedback
ClusterFuzz testcase 5241963845779456 is still reproducing on tip-of-tree build (trunk).

Please re-test your fix against this testcase and if the fix was incorrect or incomplete, please re-open the bug. Otherwise, ignore this notification and add ClusterFuzz-Wrong label.
Status: Assigned (was: Fixed)
CF thinks that it's still reproducible, as it tried to reproduce the issue with the same arguments as it was found. Let me try to change the arguments for this particular testcase, then it should go away.
Status: Fixed (was: Assigned)
Yup, updated the arguments manually and now CF cannot reproduce that anymore, as expected. Closing again.

Sign in to add a comment