CHECK failure: color_filter_ in paint_filter.cc |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6268605900783616 Fuzzer: libFuzzer_paint_op_buffer_eq_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: color_filter_ in paint_filter.cc cc::ColorFilterPaintFilter::ColorFilterPaintFilter cc::PaintOpReader::ReadColorFilterPaintFilter Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=527439:527468 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6268605900783616 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
,
Jan 15 2018
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/184aac3a818a10c142ad8bcccd1ac0bd7372b4c3 (oop: Serialize a few more PaintFilter.). If this is incorrect, please remove the owner and apply the Test-Predator-Wrong-CLs label.
,
Jan 16 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/8454bbde84a0d4fe18a783820424f3aae7aec530 commit 8454bbde84a0d4fe18a783820424f3aae7aec530 Author: Vladimir Levin <vmpstr@chromium.org> Date: Tue Jan 16 22:24:25 2018 cc: Verify color filter existence when deserializing ColorFilterPaintFilter. ColorFilterPaintFilter can't be constructed unless we have a color filter, so mark the op as invalid if we don't have it. R=enne@chromium.org Bug: 801411 , 802089 Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.android:android_optional_gpu_tests_rel Change-Id: I41fec32abc09842dacc6fc9d4e96216155be2722 Reviewed-on: https://chromium-review.googlesource.com/862967 Reviewed-by: enne <enne@chromium.org> Commit-Queue: vmpstr <vmpstr@chromium.org> Cr-Commit-Position: refs/heads/master@{#529509} [modify] https://crrev.com/8454bbde84a0d4fe18a783820424f3aae7aec530/cc/paint/paint_op_reader.cc
,
Jan 17 2018
ClusterFuzz has detected this issue as fixed in range 529508:529514. Detailed report: https://clusterfuzz.com/testcase?key=6268605900783616 Fuzzer: libFuzzer_paint_op_buffer_eq_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: color_filter_ in paint_filter.cc cc::ColorFilterPaintFilter::ColorFilterPaintFilter cc::PaintOpReader::ReadColorFilterPaintFilter Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=527439:527468 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=529508:529514 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6268605900783616 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jan 17 2018
ClusterFuzz testcase 6268605900783616 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by ClusterFuzz
, Jan 15 2018Labels: Test-Predator-Auto-Components