New issue
Advanced search Search tips

Issue 782896 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Nov 2017
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: position < size() in Vector.h

Project Member Reported by ClusterFuzz, Nov 8 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5358130405048320

Fuzzer: inferno_twister
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  position < size() in Vector.h
  blink::ValidationMessageClientImpl::HideValidationMessage
  blink::ValidationMessageClientImpl::CheckAnchorStatus
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=497683:497686

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5358130405048320

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Nov 8 2017

Components: Blink
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Nov 8 2017

Labels: Test-Predator-Auto-Owner
Owner: tkent@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/61df2105ef590a81cc9320afd52e6c9d2c2b3b12 (Add a test ensuring that validity change by a DOM mutation updates validation message UI.).

If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.

Comment 3 by kochi@chromium.org, Nov 9 2017

Owner: keishi@chromium.org
Keishi-san, could you take a look?

Comment 4 by kochi@chromium.org, Nov 9 2017

Components: -Blink Blink>Forms

Comment 5 by keishi@chromium.org, Nov 10 2017

Components: -Blink>Forms Blink>Forms>Validation
Status: Started (was: Assigned)
https://chromium-review.googlesource.com/c/chromium/src/+/760436
Project Member

Comment 6 by bugdroid1@chromium.org, Nov 14 2017

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/9436a53ff9aacbeba555f1494c62c01d222e0807

commit 9436a53ff9aacbeba555f1494c62c01d222e0807
Author: Keishi Hattori <keishi@chromium.org>
Date: Tue Nov 14 07:32:00 2017

Validation bubble: Fix UnregisterPopupOpeningObserver from being called before registration

UpdateLifecycleToCompositingCleanPlusScrolling may call UnregisterPopupOpeningObserver, so RegisterPopupOpeningObserver needs to be called before it.

Bug:  782896 
Change-Id: I277e40edac248698486773436e8f38535b40864c
Reviewed-on: https://chromium-review.googlesource.com/760436
Reviewed-by: Kent Tamura <tkent@chromium.org>
Commit-Queue: Keishi Hattori <keishi@chromium.org>
Cr-Commit-Position: refs/heads/master@{#516224}
[add] https://crrev.com/9436a53ff9aacbeba555f1494c62c01d222e0807/third_party/WebKit/LayoutTests/fast/forms/hide-validation-message-crash-expected.txt
[add] https://crrev.com/9436a53ff9aacbeba555f1494c62c01d222e0807/third_party/WebKit/LayoutTests/fast/forms/hide-validation-message-crash.html
[modify] https://crrev.com/9436a53ff9aacbeba555f1494c62c01d222e0807/third_party/WebKit/Source/core/page/ValidationMessageClientImpl.cpp

Project Member

Comment 7 by ClusterFuzz, Nov 18 2017

ClusterFuzz has detected this issue as fixed in range 514498:517698.

Detailed report: https://clusterfuzz.com/testcase?key=5358130405048320

Fuzzer: inferno_twister
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  position < size() in Vector.h
  blink::ValidationMessageClientImpl::HideValidationMessage
  blink::ValidationMessageClientImpl::CheckAnchorStatus
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=497683:497686
Fixed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=514498:517698

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5358130405048320

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 8 by ClusterFuzz, Nov 18 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Started)
ClusterFuzz testcase 5358130405048320 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment