New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 811762 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jul 7
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 2
Type: Bug



Sign in to add a comment

Timeout in v8_wasm_fuzzer

Project Member Reported by ClusterFuzz, Feb 13 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5682784878985216

Fuzzer: libFuzzer_v8_wasm_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Timeout (exceeds 25 secs)
Crash Address: 
Crash State:
  v8_wasm_fuzzer
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=449266:449283

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5682784878985216

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Cc: ahaas@chromium.org brajkumar@chromium.org
Components: Blink>JavaScript
Labels: -Pri-1 M-65 Test-Predator-Wrong CF-NeedsTriage Pri-2
Considering the above issue as v8 and leaving it as untriaged.

Note: Observing similar  issue 754428  with similar stack worked by @ahaas, hence cc'ing him for more updates on this issue.

Thanks!
Owner: clemensh@chromium.org
Status: Assigned (was: Untriaged)
The wasm fuzzer hangs in the start function, called during instantiate.
This is indeed related to 761784, but needs special handling since it's the start function which is running infinitely here.
Project Member

Comment 3 by ClusterFuzz, Feb 22 2018

Labels: OS-Mac
Project Member

Comment 4 by ClusterFuzz, Jul 7

ClusterFuzz has detected this issue as fixed in range 572608:573019.

Detailed report: https://clusterfuzz.com/testcase?key=5682784878985216

Fuzzer: libFuzzer_v8_wasm_fuzzer
Job Type: libfuzzer_chrome_ubsan
Platform Id: linux

Crash Type: Timeout (exceeds 25 secs)
Crash Address: 
Crash State:
  v8_wasm_fuzzer
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=449266:449283
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_ubsan&range=572608:573019

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5682784878985216

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Jul 7

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5682784878985216 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment