Stack-overflow in blink::StyleBuilder::ApplyProperty |
||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6546425977765888 Fuzzer: mbarbella_js_mutation_layout Job Type: windows_asan_content_shell Platform Id: windows Crash Type: Stack-overflow Crash Address: 0x003a2000 Crash State: blink::StyleBuilder::ApplyProperty Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=514498:517698 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6546425977765888 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Nov 21 2017
Assigning meade@ and cc'ing rjwright@ based on the suspect CL list.
,
Nov 21 2017
,
Nov 22 2017
The test case for this looks like the JS is recursing a lot, and we happen to stack overflow out in some style code. I'd say that's wontfix.
,
Nov 22 2017
,
Nov 29 2017
ClusterFuzz testcase 6546425977765888 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace. |
||||||
►
Sign in to add a comment |
||||||
Comment 1 by ClusterFuzz
, Nov 21 2017Labels: Test-Predator-Auto-Components