New issue
Advanced search Search tips

Issue 785098 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Dec 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 3
Type: Bug



Sign in to add a comment

Out-of-memory in swiftshader_vertex_routine_fuzzer

Project Member Reported by ClusterFuzz, Nov 15 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5549496187748352

Fuzzer: libFuzzer_swiftshader_vertex_routine_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  swiftshader_vertex_routine_fuzzer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=512583:512623

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5549496187748352

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Cc: kkaluri@chromium.org
Components: Internals>GPU>SwiftShader
Labels: M-64 Test-Predator-Wrong CF-NeedsTriage
Unable to provide possible suspect using Predator, CL and Code Search.
Could someone please look into the issue.

Thank You...

Comment 2 by danakj@chromium.org, Nov 17 2017

Owner: capn@chromium.org
Status: Assigned (was: Untriaged)
Project Member

Comment 3 by ClusterFuzz, Nov 18 2017

Labels: OS-Mac

Comment 4 by capn@chromium.org, Nov 27 2017

Labels: -Pri-1 Pri-3
OOMs are acceptable for the GPU process.

This one is caused by an excessively large array in the GLSL shader. We could potentially cap it and fail to compile.
Project Member

Comment 5 by ClusterFuzz, Dec 5 2017

ClusterFuzz has detected this issue as fixed in range 521502:521564.

Detailed report: https://clusterfuzz.com/testcase?key=5549496187748352

Fuzzer: libFuzzer_swiftshader_vertex_routine_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  swiftshader_vertex_routine_fuzzer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=512583:512623
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=521502:521564

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5549496187748352

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 6 by ClusterFuzz, Dec 5 2017

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5549496187748352 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment