Issue metadata
Sign in to add a comment
|
TextOffsetMaaping/ComputeStartPositon(LayoutBlock) crashes with multicol |
||||||||||||||||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4846696673312768 Fuzzer: bj_broddelwerk Job Type: mac_asan_chrome Platform Id: mac Crash Type: CHECK failure Crash Address: Crash State: start <= end (SUB class="CLASS8 CLASS2"class="CLASS5" (editable)@afterAnchor) in blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> > blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> > Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=550079:550107 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4846696673312768 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Apr 17 2018
The root cause is handling of multicol in TextOffsetMapping. |
|||||||||||||||||||||||||
►
Sign in to add a comment |
|||||||||||||||||||||||||
Comment 1 by brajkumar@chromium.org
, Apr 16 2018Components: Blink>Editing
Labels: -Type-Bug M-67 Test-Predator-Wrong Type-Bug-Regression
Owner: yosin@chromium.org
Status: Assigned (was: Untriaged)