Null-dereference READ in blink::LowestCommonAncestor |
|||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5295607116464128 Fuzzer: bj_broddelwerk Job Type: linux_msan_content_shell_drt Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000008 Crash State: blink::LowestCommonAncestor blink::GraphicsLayer::PaintContents cc_blink::WebContentLayerImpl::PaintContentsToDisplayList Sanitizer: memory (MSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=539835:539838 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5295607116464128 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Mar 1 2018
Automatically adding ccs based on suspected regression changelists: [PE] Pixel snap fragment clips by fs@opera.com - https://chromium.googlesource.com/chromium/src/+/d891e5fb83542be7eb8e23d4ff99d28541985260 [SPv175] Add mask effect node for masked SVG roots. by chrishtr@chromium.org - https://chromium.googlesource.com/chromium/src/+/09358ab1c1dd96c4a8bf516e90a927b0d98c014c If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
,
Mar 1 2018
Since I believe Chris' fix fixed something that triggered a similar crash, may it's likely it introduced a new different one...
,
Mar 1 2018
,
Mar 1 2018
,
Mar 2 2018
,
Mar 6 2018
,
Mar 7 2018
ClusterFuzz has detected this issue as fixed in range 541134:541136. Detailed report: https://clusterfuzz.com/testcase?key=5295607116464128 Fuzzer: bj_broddelwerk Job Type: linux_msan_content_shell_drt Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000008 Crash State: blink::LowestCommonAncestor blink::GraphicsLayer::PaintContents cc_blink::WebContentLayerImpl::PaintContentsToDisplayList Sanitizer: memory (MSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=539835:539838 Fixed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=541134:541136 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5295607116464128 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page. |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by ClusterFuzz
, Mar 1 2018Labels: Test-Predator-Auto-Components