Timeout in v8_regexp_parser_fuzzer |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5314792331149312 Fuzzer: libFuzzer_v8_regexp_parser_fuzzer Job Type: libfuzzer_chrome_ubsan Platform Id: linux Crash Type: Timeout (exceeds 25 secs) Crash Address: Crash State: v8_regexp_parser_fuzzer Sanitizer: undefined (UBSAN) Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5314792331149312 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
,
Nov 22 2017
I can confirm that this testcase takes an inordinate amount of time to execute. The input is only 58 bytes, so it is probably something non-linear in the regex engine. Assigning Yang to take a look.
,
Dec 21 2017
,
Apr 17 2018
We are closing all ooms and timeouts that are unreproducible. We won't be filing such bugs in future. |
||||
►
Sign in to add a comment |
||||
Comment 1 by kkaluri@chromium.org
, Nov 20 2017Components: Blink>JavaScript