TextIterator crahses with mixed editable. |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5700349783703552 Fuzzer: ochang_domfuzzer Job Type: linux_msan_content_shell_drt Platform Id: linux Crash Type: Abrt Crash Address: 0x03e900000001 Crash State: blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::NodeTraversal> >::Te blink::CalculateCharacterSubrange blink::ColdModeSpellCheckRequester::RequestCheckingForNextChunk Sanitizer: memory (MSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=518240:518474 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5700349783703552 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Jan 19 2018
Lower to Pri-3 because it is caused by testing only feature internals.runIdleTimeSpellChecker()
<script src="../../resources/testharness.js"<script>
</script><li contenteditable="true">foo <span id="words"></span>
<div contenteditable="false" style="-webkit-user-select: none">uneditable</div>
<script>
test(function() {
words.textContent = ' 123'.repeat(1024 * 4);
internals.runIdleTimeSpellChecker(document);
});
</script>
,
Mar 23 2018
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/a3654e25f47d9baf1818e021d2fd8baf8c992312 ([v8] Log ScriptResources with no cache handler). If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
,
Mar 26 2018
No way this CL could cause this sort of crash.
,
Mar 28 2018
|
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ClusterFuzz
, Jan 18 2018Labels: Test-Predator-Auto-Components