New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 829333 link

Starred by 2 users
Status: Duplicate
Merged: issue 462234
Owner: ----
Closed: Apr 2018
Cc:
█ brajkumar@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Windows , Mac
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: std::numeric_limits<unsigned>::max() - data.length() >= result_length in Text.cp

Project Member Reported by ClusterFuzz, Apr 5 2018 
Detailed report: https://clusterfuzz.com/testcase?key=5186323510722560

Fuzzer: inferno_layout_test_unmodified
Job Type: windows_asan_chrome_no_sandbox
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  std::numeric_limits<unsigned>::max() - data.length() >= result_length in Text.cp
  blink::Text::wholeText
  blink::V8Text::wholeTextAttributeGetterCallback
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5186323510722560

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
Project Member

Comment 1 by ClusterFuzz, Apr 6 2018

Labels: OS-Mac

Comment 2 by brajkumar@chromium.org, Apr 6 2018

Cc: brajkumar@chromium.org
Mergedinto: 462234
Status: Duplicate (was: Untriaged)
This issue looks similar to  bug 462234   , hence merging in to it. Feel free to undupe if it's a different issue.

Thanks!
►

Sign in to add a comment