New issue
Advanced search Search tips

Issue 839304 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: May 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: it != entry_map_.end() in test_options_provider.cc

Project Member Reported by ClusterFuzz, May 3 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5371899400683520

Fuzzer: afl_paint_op_buffer_eq_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  it != entry_map_.end() in test_options_provider.cc
  cc::TestOptionsProvider::GetEntryInternal
  cc::PaintOpReader::Read
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=555636:555647

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5371899400683520

Additional requirements: Requires Gestures

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, May 3 2018

Components: Internals>Compositing
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, May 3 2018

Cc: enne@chromium.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Project Member

Comment 3 by ClusterFuzz, May 3 2018

Labels: Test-Predator-Auto-Owner
Owner: khushals...@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/a8d50641199fe8b3045a4615d877d7c341bf7724 (oop: Intergrate skia font remoting for OOP raster.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
Project Member

Comment 4 by bugdroid1@chromium.org, May 4 2018

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/bbcba313cabf5a3b6e32e9ec9469a8c88160594b

commit bbcba313cabf5a3b6e32e9ec9469a8c88160594b
Author: Khushal <khushalsagar@chromium.org>
Date: Fri May 04 18:44:26 2018

cc: Fix TestOptionsProvider image entries caching.

Right now TestOptionsProvider tries to intercept transfer cache usage
for images, which invalidates a lot of the assumptions made by the
calling code. Instead change this to create and store transfer cache
entries similar to production behaviour.

Also remove some asserts from TransferCacheTestHelper. Since this is
used by fuzzers, it should behave more like production code.

R=enne@chromium.org
BUG= 839304 

Cq-Include-Trybots: luci.chromium.try:android_optional_gpu_tests_rel;master.tryserver.blink:linux_trusty_blink_rel
Change-Id: Ifd0f25dd4ef13872245717b85ef8b9bd5df3c1d0
Reviewed-on: https://chromium-review.googlesource.com/1043526
Reviewed-by: enne <enne@chromium.org>
Commit-Queue: Khushal <khushalsagar@chromium.org>
Cr-Commit-Position: refs/heads/master@{#556131}
[modify] https://crrev.com/bbcba313cabf5a3b6e32e9ec9469a8c88160594b/cc/paint/image_transfer_cache_entry.h
[modify] https://crrev.com/bbcba313cabf5a3b6e32e9ec9469a8c88160594b/cc/test/test_options_provider.cc
[modify] https://crrev.com/bbcba313cabf5a3b6e32e9ec9469a8c88160594b/cc/test/test_options_provider.h
[modify] https://crrev.com/bbcba313cabf5a3b6e32e9ec9469a8c88160594b/cc/test/transfer_cache_test_helper.cc
[modify] https://crrev.com/bbcba313cabf5a3b6e32e9ec9469a8c88160594b/cc/test/transfer_cache_test_helper.h

Project Member

Comment 5 by ClusterFuzz, May 5 2018

ClusterFuzz has detected this issue as fixed in range 556126:556138.

Detailed report: https://clusterfuzz.com/testcase?key=5371899400683520

Fuzzer: afl_paint_op_buffer_eq_fuzzer
Job Type: afl_chrome_asan
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  it != entry_map_.end() in test_options_provider.cc
  cc::TestOptionsProvider::GetEntryInternal
  cc::PaintOpReader::Read
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=555636:555647
Fixed: https://clusterfuzz.com/revisions?job=afl_chrome_asan&range=556126:556138

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5371899400683520

Additional requirements: Requires Gestures

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 6 by ClusterFuzz, May 5 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5371899400683520 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment