New issue
Advanced search Search tips

Issue 789526 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: Nov 2017
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Windows , Chrome , Mac , Fuchsia
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: count <= MaxElementCountInBackingStore<T>() in PartitionAllocator.h

Project Member Reported by ClusterFuzz, Nov 29 2017

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5521432569446400

Fuzzer: inferno_twister
Job Type: mac_asan_content_shell
Platform Id: mac

Crash Type: CHECK failure
Crash Address: 
Crash State:
  count <= MaxElementCountInBackingStore<T>() in PartitionAllocator.h
  blink::SourceBuffer::AppendBufferInternal
  blink::V8SourceBuffer::appendBufferMethodCallback
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_content_shell&range=447465:447478

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5521432569446400

Additional requirements: Requires HTTP

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 

Comment 1 by lgrey@chromium.org, Nov 29 2017

Components: Blink>Internals
Cc: kkaluri@chromium.org
Labels: Test-Predator-Wrong CF-NeedsTriage M-63
Unable to provide possible suspect using Predator, CL and Code Search.
Could someone please look into the issue.

Thank You...
Cc: palmer@chromium.org
Labels: -CF-NeedsTriage
palmer@, can you please look into this issue if possible?

Comment 4 by palmer@chromium.org, Nov 30 2017

Labels: OS-Android OS-Chrome OS-Fuchsia OS-Linux OS-Windows
Status: Fixed (was: Untriaged)
I think this is working as intended: the caller (Blink) asked to allocate more memory than Partition Alloc allows, by policy.
Project Member

Comment 5 by ClusterFuzz, Dec 8 2017

Labels: Needs-Feedback
ClusterFuzz testcase 5521432569446400 is still reproducing on tip-of-tree build (trunk).

Please re-test your fix against this testcase and if the fix was incorrect or incomplete, please re-open the bug. Otherwise, ignore this notification and add ClusterFuzz-Wrong label.
Status: WontFix (was: Fixed)
Hmm, I meant to mark this as WontFix, not Fixed.

Sign in to add a comment