New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 801021 link

Starred by 1 user

Issue metadata

Status: Duplicate
Owner:
Closed: Jan 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Windows
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: !node || IsElementOfType<const T>(*node) in Element.h

Project Member Reported by ClusterFuzz, Jan 11 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6426221167771648

Fuzzer: inferno_layout_test_unmodified
Job Type: windows_asan_content_shell
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !node || IsElementOfType<const T>(*node) in Element.h
  blink::HTMLDetailsElement::FindMainSummary
  blink::HTMLSummaryElement::IsMainSummary
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6426221167771648

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Jan 11 2018

Labels: OS-Linux
Cc: brajkumar@chromium.org
Components: Blink>HTML
Labels: M-64 Test-Predator-Wrong
Owner: tkent@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, "HTMLSummaryElement.cpp" and observed there was some recent changes for the below file.

Suspect CL: https://chromium.googlesource.com/chromium/src/+/59f941fd507f6a6d45cea7147f758c3ebe6bfae0

tkent@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

Comment 3 by tkent@chromium.org, Jan 11 2018

Mergedinto: 580734
Status: Duplicate (was: Assigned)
Using internals.youngestShadowRoot().

Sign in to add a comment