New issue
Advanced search Search tips

Issue 826172 link

Starred by 1 user
Status: WontFix
Owner: ----
Closed: Mar 2018
Cc:
pdr@chromium.org
e...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Null-dereference READ in GetDocument

Project Member Reported by ClusterFuzz, Mar 27 2018 
Detailed report: https://clusterfuzz.com/testcase?key=6316062547902464

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000020
Crash State:
  GetDocument
  IsDocumentElement
  blink::LayoutBoxModelObject::StyleDidChange
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=523898:523900

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6316062547902464

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
Project Member

Comment 1 by ClusterFuzz, Mar 27 2018

Components: Blink>Layout
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Comment 2 by brajkumar@chromium.org, Mar 28 2018

Cc: -ifratric@google.com pdr@chromium.org wangxianzhu@chromium.org
Labels: -Pri-1 -Type-Bug M-66 Test-Predator-Wrong CF-NeedsTriage Pri-2 Type-Launch-OWP
Unable to find actual suspect through code search and also observing no related changes under regression range, hence adding appropriate label and requesting someone from blink team to look in to this issue.

Thanks!

Comment 3 by brajkumar@chromium.org, Mar 28 2018

Cc: -wangxianzhu@chromium.org e...@chromium.org
Labels: -Type-Launch-OWP Type-Bug

Comment 4 by e...@chromium.org, Mar 28 2018 

There are *no* blink changes in the regression range. Requesting a re-run.

Comment 5 by e...@chromium.org, Mar 30 2018

Status: WontFix (was: Untriaged)
Unable to reproduce and nonsensical regression range. Not actionable.
Project Member

Comment 6 by ClusterFuzz, Apr 6 2018

Labels: Needs-Feedback
ClusterFuzz testcase 6316062547902464 is still reproducing on tip-of-tree build (trunk).

If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase.

Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
►

Sign in to add a comment