New issue
Advanced search Search tips

Issue 833433 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 832497
Owner: ----
Closed: Apr 2018
EstimatedDays: ----
NextAction: ----
OS: Linux , Mac
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: start <= end (#text "\n"@offsetInAnchor[0] vs. TABLE class="CLASS13 CLASS11"@off

Project Member Reported by ClusterFuzz, Apr 16 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=4869588530233344

Fuzzer: bj_broddelwerk
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: CHECK failure
Crash Address: 
Crash State:
  start <= end (#text "\n"@offsetInAnchor[0] vs. TABLE class="CLASS13 CLASS11"@off
  blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> >
  blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::FlatTreeTraversal> >
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=550079:550107

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4869588530233344

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Apr 16 2018

Labels: OS-Linux
Mergedinto: 832497
Status: Duplicate (was: Untriaged)
This issue looks similar to  bug 832497 , hence merging in to it. Feel free to undupe if it's a different issue.

Thanks!

Sign in to add a comment