New issue
Advanced search Search tips

Issue 825460 link

Starred by 4 users
Status: WontFix
Owner:
f...@opera.com
Closed: Apr 2018
Cc:
ifratric@google.com
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug


Show other hotlists

Hotlists containing this issue:
Hotlist-1


Sign in to add a comment

CHECK failure: !HasPendingResources() || !IsWellFormedDocument(&GetDocument()) in SVGUseElement

Project Member Reported by ClusterFuzz, Mar 24 2018 
Detailed report: https://clusterfuzz.com/testcase?key=4505626701725696

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !HasPendingResources() || !IsWellFormedDocument(&GetDocument()) in SVGUseElement
  blink::SVGUseElement::InsertedInto
  blink::ContainerNode::NotifyNodeInsertedInternal
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_debug_chrome&range=530924:530933

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4505626701725696

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
Project Member

Comment 1 by ClusterFuzz, Mar 24 2018

Components: Blink>DOM Blink>SVG
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Mar 24 2018

Labels: Test-Predator-Auto-Owner
Owner: f...@opera.com
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/c36508a349b4bff18c73f2e2e2b46805ad091598 ([CI] DOM-based SVG resource tracking (1/n)).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

Comment 3 by f...@opera.com, Mar 26 2018

Labels: -Pri-1 Pri-2
The kHasPendingResources flag isn't used by SVGUseElement anymore, so this DCHECK is stale and should be removed. The flag itself is an optimization (and is about to be removed), so P1 doesn't feel warranted regardless.
Project Member

Comment 4 by bugdroid1@chromium.org, Mar 26 2018 

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/07895817689c7506c1559e05b162ac9cafafc9c0

commit 07895817689c7506c1559e05b162ac9cafafc9c0
Author: Fredrik Söderquist <fs@opera.com>
Date: Mon Mar 26 18:57:46 2018

Remove outdated DCHECK in SVGUseElement::InsertedInto

This DCHECK was made obsolete by
9b88406d1a87dfeef593c6d1a91beb3a2b696391, since it stopped using the
"pending resource" flag for <use>.

Bug:  825460 
Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2
Change-Id: Ie1202097eb2172ef9ed3866e3a6575fbe4aa09db
Reviewed-on: https://chromium-review.googlesource.com/980252
Reviewed-by: Stephen Chenney <schenney@chromium.org>
Commit-Queue: Fredrik Söderquist <fs@opera.com>
Cr-Commit-Position: refs/heads/master@{#545854}
[modify] https://crrev.com/07895817689c7506c1559e05b162ac9cafafc9c0/third_party/WebKit/Source/core/svg/SVGUseElement.cpp
Project Member

Comment 5 by ClusterFuzz, Apr 9 2018

Status: WontFix (was: Assigned)
ClusterFuzz testcase 4505626701725696 is flaky and no longer crashes, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
►

Sign in to add a comment