Null-dereference in SkImageFilter::filterBounds |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6613249226440704 Fuzzer: miaubiz_svg_fuzzer Job Type: windows_syzyasan_chrome Platform Id: windows Crash Type: Null-dereference Crash Address: 0x00000003 Crash State: SkImageFilter::filterBounds cc::MapRectInternal cc::FilterOperation::MapRect Memory Tool: SYZYASAN Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=518507:518561 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6613249226440704 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Nov 26 2017
Testcase 6613249226440704 is a top crash on ClusterFuzz for android platform. Please prioritize fixing this crash. Marking this crash as a Beta release blocker. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Nov 27 2017
This is marked as Beta blocker for M-64 and would be good to have all the Beta blockers resolved before branch point. M-64 will be branched in few days. Could someone from skia team,please have a look ASAP and help in further investigation. Thanks..!
,
Nov 28 2017
Likely related to the introduction of PaintFilter in https://chromium.googlesource.com/chromium/src/+/7865b5be0f6472b14ed7a30bc7e41896a8ec9e6e ?
,
Nov 28 2017
Most likely a dupe of 788180.
,
Nov 28 2017
,
Nov 29 2017
ClusterFuzz has detected this issue as fixed in range 519579:519602. Detailed report: https://clusterfuzz.com/testcase?key=6613249226440704 Fuzzer: miaubiz_svg_fuzzer Job Type: windows_syzyasan_chrome Platform Id: windows Crash Type: Null-dereference Crash Address: 0x00000003 Crash State: SkImageFilter::filterBounds cc::MapRectInternal cc::FilterOperation::MapRect Memory Tool: SYZYASAN Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=518507:518561 Fixed: https://clusterfuzz.com/revisions?job=windows_syzyasan_chrome&range=519579:519602 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6613249226440704 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Nov 29 2017
ClusterFuzz testcase 6613249226440704 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by kkaluri@chromium.org
, Nov 23 2017Components: Internals>Skia
Labels: M-64 Test-Predator-Wrong