Abrt in sk_abort_no_print |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5178049598586880 Fuzzer: libFuzzer_paint_op_buffer_eq_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x03e90000510f Crash State: sk_abort_no_print SkAutoSTArray<32, float>::reset SkAutoSTArray<32, float>::reset Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=520972:521004 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5178049598586880 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
,
Jan 10 2018
related to paint op serialization?
,
Jan 10 2018
https://skia.googlesource.com/skia/+/a088365e2faca3f28469c0fc568169e095b5b1a0/include/private/SkTemplates.h#169 Debug asserts from the fuzzer in Skia are generally WontFix. This one looks like it handles resetting to a count of zero even though it asserts. If there's a release issue, then we can fix it there.
,
Jan 12 2018
sgtm- you're right code looks like it resets to zero though the assert is there
,
Jan 17 2018
ClusterFuzz testcase 5178049598586880 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
,
Apr 26 2018
ClusterFuzz has detected this issue as fixed in range 553550:553569. Detailed report: https://clusterfuzz.com/testcase?key=5178049598586880 Fuzzer: libFuzzer_paint_op_buffer_eq_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x053900000849 Crash State: sk_abort_no_print SkAutoSTArray<32, float>::reset SkAutoSTArray<32, float>::reset Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=520972:521004 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=553550:553569 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5178049598586880 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Dec 15 2017Labels: Test-Predator-Auto-Components