New issue
Advanced search Search tips

Issue 833283 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 832497
Owner: ----
Closed: Apr 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: start <= end (H3 class="CLASS10 CLASS0"@beforeAnchor vs. BODY class="CLASS12 CLA

Project Member Reported by ClusterFuzz, Apr 16 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5294408577318912

Fuzzer: bj_broddelwerk
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: CHECK failure
Crash Address: 
Crash State:
  start <= end (H3 class="CLASS10 CLASS0"@beforeAnchor vs. BODY class="CLASS12 CLA
  blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> >
  blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> >
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=550079:550107

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5294408577318912

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Components: Blink
Mergedinto: 832497
Status: Duplicate (was: Untriaged)
This issue looks similar to  bug 832497 , hence merging in to it. Feel free to undupe if it's a different issue.

Thanks!

Sign in to add a comment