New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 796822 link

Starred by 1 user
Status: Duplicate
Merged: issue 797156
Owner:
█ oetu...@nvidia.com
Email to this user bounced
Closed: Dec 2017
Cc:
pnangunoori@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

ASSERT: field.type()->getStruct()->name() != nullptr

Project Member Reported by ClusterFuzz, Dec 21 2017 
Detailed report: https://clusterfuzz.com/testcase?key=5682576504389632

Fuzzer: libFuzzer_angle_translator_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  field.type()->getStruct()->name() != nullptr
  sh::TParseContext::checkIsBelowStructNestingLimit
  sh::TParseContext::addStructDeclaratorList
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=525358:525384

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5682576504389632

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

Comment 1 by pnangunoori@chromium.org, Dec 22 2017

Cc: pnangunoori@chromium.org
Labels: M-65 Test-Predator-Wrong
Owner: oetu...@nvidia.com
Status: Assigned (was: Untriaged)
oetuaho@ -- Could you please look into this issue as the recent changes are being made to the file 'ParseContext.cpp'.

Please reassign if there is nothing to do with your changes.

Thanks!

Comment 2 by oetu...@nvidia.com, Dec 22 2017

Mergedinto: 797156
Status: Duplicate (was: Assigned)
Duplicate of  bug 797156 .
Project Member

Comment 3 by ClusterFuzz, Dec 29 2017 

ClusterFuzz has detected this issue as fixed in range 526312:526321.

Detailed report: https://clusterfuzz.com/testcase?key=5682576504389632

Fuzzer: libFuzzer_angle_translator_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  field.type()->getStruct()->name() != nullptr
  sh::TParseContext::checkIsBelowStructNestingLimit
  sh::TParseContext::addStructDeclaratorList
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=525358:525384
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=526312:526321

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5682576504389632

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
►

Sign in to add a comment