CHECK failure: false. New paint chunk id ADDRESS:DrawingPaintPhaseForeground:0 has duplicated i |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6354148950540288 Fuzzer: marty_html_twiddler Job Type: linux_debug_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false. New paint chunk id ADDRESS:DrawingPaintPhaseForeground:0 has duplicated i blink::PaintController::CheckDuplicatePaintChunkId blink::PaintController::UpdateCurrentPaintChunkProperties Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=537453:537466 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6354148950540288 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Mar 17 2018
Automatically adding ccs based on suspected regression changelists: Reland "[jumbo] avoid helper function collisions in VisibleUnits*Test.cpp" by brucedawson@chromium.org - https://chromium.googlesource.com/chromium/src/+/0fbd51f0347223bf09ae85d28fa34536c1dbb2db Correctly serialize empty content_type for blobs. by mek@chromium.org - https://chromium.googlesource.com/chromium/src/+/bb84d169288460af40536ebbe0303cb35f11a5a1 [SPv175] Enable SlimmingPaintV175 by default by wangxianzhu@chromium.org - https://chromium.googlesource.com/chromium/src/+/0a9a5c311a1d3a298f952e495510bd6fe3faa2f6 If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
,
Mar 19 2018
An SPv1.75 bug. Not sure if it's new.
,
Mar 19 2018
Reduced test case (hover the audio to reproduce): <!DOCTYPE html> <audio controls="controls">XYZ</audio> <div style="transform: skewX(45deg); columns: 1; height: 5px">1234567890</div>
,
Mar 20 2018
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/56924fcbdf6a93dfdf460ffb88589bf80eb3c947 commit 56924fcbdf6a93dfdf460ffb88589bf80eb3c947 Author: Xianzhu Wang <wangxianzhu@chromium.org> Date: Tue Mar 20 06:48:04 2018 [PE] Fix DCHECK failure when copying cached subsequence containing fragments Previously CopyCachedSubsequence() called SetCurrentPaintChunkProperties() which always reset id.fragment, causing multiple fragments to have the same id. Now call SetCurrentPaintChunkPropertiesUsingIdWithFragment() which doesn't reset fragment. Bug: 823029 Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2 Change-Id: Ibf34f7bb5fba798f96a755ba89fddf848c5f8656 Reviewed-on: https://chromium-review.googlesource.com/969961 Commit-Queue: Xianzhu Wang <wangxianzhu@chromium.org> Reviewed-by: Chris Harrelson <chrishtr@chromium.org> Cr-Commit-Position: refs/heads/master@{#544299} [modify] https://crrev.com/56924fcbdf6a93dfdf460ffb88589bf80eb3c947/third_party/WebKit/Source/platform/graphics/paint/PaintController.cpp [modify] https://crrev.com/56924fcbdf6a93dfdf460ffb88589bf80eb3c947/third_party/WebKit/Source/platform/graphics/paint/PaintController.h [modify] https://crrev.com/56924fcbdf6a93dfdf460ffb88589bf80eb3c947/third_party/WebKit/Source/platform/graphics/paint/PaintControllerTest.cpp
,
Mar 20 2018
,
Mar 21 2018
ClusterFuzz has detected this issue as fixed in range 544298:544299. Detailed report: https://clusterfuzz.com/testcase?key=6354148950540288 Fuzzer: marty_html_twiddler Job Type: linux_debug_chrome Platform Id: linux Crash Type: CHECK failure Crash Address: Crash State: false. New paint chunk id ADDRESS:DrawingPaintPhaseForeground:0 has duplicated i blink::PaintController::CheckDuplicatePaintChunkId blink::PaintController::UpdateCurrentPaintChunkProperties Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=537453:537466 Fixed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=544298:544299 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6354148950540288 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Mar 21 2018
ClusterFuzz testcase 6354148950540288 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ClusterFuzz
, Mar 17 2018Labels: Test-Predator-Auto-Components