New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 811095 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Last visit > 30 days ago
Closed: Feb 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Abrt in sk_abort_no_print

Project Member Reported by ClusterFuzz, Feb 11 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6724021115420672

Fuzzer: libFuzzer_paint_op_buffer_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x03e900005e75
Crash State:
  sk_abort_no_print
  SkPaint::computeFastBounds
  SkPaint::computeFastBounds
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=529788:529845

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6724021115420672

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, Feb 11 2018

Components: Internals>Skia
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Feb 11 2018

Cc: jvanverth@google.com
Labels: Test-Predator-Auto-CC
Automatically adding ccs based on suspected regression changelists:

Support scaled color emojis for SDF fallback by jvanverth@google.com - https://skia.googlesource.com/skia/+/c65b65dd816b7a9fbd148f577f0271cd555c4df6

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
Cc: -jvanverth@google.com
Owner: jvanverth@chromium.org
Status: Assigned (was: Untriaged)
Cc: herb@chromium.org reed@chromium.org
This appears to be something real, but unrelated to my change. I'm not sure what it should do if the rect is not sorted. Sort the rect? Fail? 
Project Member

Comment 5 by bugdroid1@chromium.org, Feb 21 2018

The following revision refers to this bug:
  https://skia.googlesource.com/skia/+/5d32b83102a4477632f0bd360b3584a144329186

commit 5d32b83102a4477632f0bd360b3584a144329186
Author: Jim Van Verth <jvanverth@google.com>
Date: Wed Feb 21 16:43:02 2018

Add isFinite() bounds check for drawPoints

Bug:  811095 
Change-Id: I09a55622a19ebfc9430d7676eb8764c074f1bcb7
Reviewed-on: https://skia-review.googlesource.com/109022
Reviewed-by: Herb Derby <herb@google.com>
Commit-Queue: Jim Van Verth <jvanverth@google.com>

[modify] https://crrev.com/5d32b83102a4477632f0bd360b3584a144329186/src/core/SkCanvas.cpp

Project Member

Comment 6 by ClusterFuzz, Feb 22 2018

ClusterFuzz has detected this issue as fixed in range 538208:538224.

Detailed report: https://clusterfuzz.com/testcase?key=6724021115420672

Fuzzer: libFuzzer_paint_op_buffer_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x03e900005e75
Crash State:
  sk_abort_no_print
  SkPaint::computeFastBounds
  SkPaint::computeFastBounds
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=529788:529845
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=538208:538224

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6724021115420672

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 7 by ClusterFuzz, Feb 22 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6724021115420672 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment