New issue
Advanced search Search tips

Issue 816361 link

Starred by 1 user

Issue metadata

Status: Duplicate
Owner:
Closed: Apr 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference WRITE in sw::FrameBufferX11::~FrameBufferX11

Project Member Reported by ClusterFuzz, Feb 26 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6708792822333440

Fuzzer: mbarbella_webgl
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: Null-dereference WRITE
Crash Address: 0x00000010
Crash State:
  sw::FrameBufferX11::~FrameBufferX11
  sw::FrameBufferX11::~FrameBufferX11
  egl::WindowSurface::~WindowSurface
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6708792822333440

Additional requirements: Requires Gestures

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
 
Project Member

Comment 1 by ClusterFuzz, Feb 26 2018

Labels: M-66 ReleaseBlock-Beta Fuzz-Blocker
This crash occurs very frequently on linux platform and is likely preventing the fuzzer mbarbella_webgl from making much progress. Fixing this will allow more bugs to be found.

Marking this bug as a blocker for next Beta release.

If this is incorrect, please add ClusterFuzz-Wrong label and remove the ReleaseBlock-Beta label.
Project Member

Comment 2 by ClusterFuzz, Feb 26 2018

Components: Internals>GPU>SwiftShader
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Comment 3 by sugoi@chromium.org, Feb 26 2018

Labels: -ReleaseBlock-Beta ReleaseBlock-NA
Owner: capn@chromium.org
Looks a lot like a duplicate of 813102. Assigning to capn@ for verification.
Status: Assigned (was: Untriaged)
Mergedinto: 813102
Status: Duplicate (was: Assigned)

Sign in to add a comment