New issue
Advanced search Search tips

Issue 834475 link

Starred by 1 user
Status: Duplicate
Merged: issue 833509
Owner: ----
Closed: Apr 2018
Cc:
mac-bugs-priority@chromium.org
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: start <= end (#text "<STYLE></STYLE>"@offsetInAnchor[15] vs. BODY class="CLASS3

Project Member Reported by ClusterFuzz, Apr 18 2018 
Detailed report: https://clusterfuzz.com/testcase?key=6643453963010048

Fuzzer: bj_broddelwerk
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: CHECK failure
Crash Address: 
Crash State:
  start <= end (#text "<STYLE></STYLE>"@offsetInAnchor[15] vs. BODY class="CLASS3 
  blink::TextIteratorAlgorithm<blink::EditingAlgorithm<blink::NodeTraversal> >::Te
  blink::CalculateCharacterSubrange
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=551557:551563

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6643453963010048

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by brajkumar@chromium.org, Apr 19 2018

Mergedinto: 833509
Status: Duplicate (was: Untriaged)
This issue looks similar to  bug 833509 , hence merging in to it. Feel free to undupe if it's a different issue.

Note: Since the main  issue 832497  is getting spammed of duplicates merging here.

Thanks!
►

Sign in to add a comment