New issue
Advanced search Search tips

Issue 843503 link

Starred by 2 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

ASSERT: false

Project Member Reported by ClusterFuzz, May 16 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=6349581676445696

Fuzzer: libFuzzer_gpu_swiftshader_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  false
  es2::Device::stretchRect
  es2::Context::blitFramebuffer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=523270:523295

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6349581676445696

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, May 16 2018

Components: Internals>GPU>SwiftShader
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, May 16 2018

Components: Internals>GPU>SwiftShader
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 3 by ClusterFuzz, May 16 2018

Cc: piman@chromium.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Project Member

Comment 4 by ClusterFuzz, May 16 2018

Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Project Member

Comment 5 by ClusterFuzz, May 16 2018

Labels: Test-Predator-Auto-Owner
Owner: ericrk@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/7b9fe37fc214c456257f79ff6e9c76d37657100d (Revert "Logging to ensure that non-offscreen surfaces are destroyed as expected").

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
Project Member

Comment 6 by ClusterFuzz, May 16 2018

Labels: Test-Predator-Auto-Owner
Owner: ericrk@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/7b9fe37fc214c456257f79ff6e9c76d37657100d (Revert "Logging to ensure that non-offscreen surfaces are destroyed as expected").

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

Comment 7 by piman@chromium.org, May 16 2018

Cc: sugoi@chromium.org
Owner: capn@chromium.org
Assert in SwiftShader code

Comment 8 by capn@chromium.org, May 16 2018

Cc: -sugoi@chromium.org capn@chromium.org
Labels: -Pri-1 Pri-2
Owner: sugoi@chromium.org
Alexis, it looks like this was added as part of https://swiftshader-review.googlesource.com/2180 quite a while ago, but the assert wasn't hit until recent Chrome-side changes. Mind taking a closer look?
Project Member

Comment 9 by ClusterFuzz, May 17 2018

ClusterFuzz has detected this issue as fixed in range 559059:559067.

Detailed report: https://clusterfuzz.com/testcase?key=6349581676445696

Fuzzer: libFuzzer_gpu_swiftshader_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  false
  es2::Device::stretchRect
  es2::Context::blitFramebuffer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=523270:523295
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=559059:559067

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6349581676445696

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 10 by ClusterFuzz, May 17 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 6349581676445696 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Comment 11 by piman@chromium.org, May 17 2018

Labels: ClusterFuzz-Wrong
Status: Assigned (was: Verified)
https://chromium.googlesource.com/chromium/src/+/a210e801d2389b72e762a446be8651700a71b330 (in the progression range) landed which changes the interpretation of the "config" bits, causing the repro cases to not apply any more (we temporarily lost coverage). CF would eventually restore coverage, but in the mean time let's reopen.
Project Member

Comment 12 by ClusterFuzz, Dec 1

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 6349581676445696 appears to be flaky, updating reproducibility label.
Labels: -Unreproducible Reproducible
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
Project Member

Comment 15 by ClusterFuzz, Dec 5

ClusterFuzz has detected this issue as fixed in range 613661:613671.

Detailed report: https://clusterfuzz.com/testcase?key=6349581676445696

Fuzzer: libFuzzer_gpu_swiftshader_fuzzer
Fuzz target binary: gpu_swiftshader_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  false
  es2::Device::stretchRect
  es2::Context::blitFramebuffer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=523270:523295
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=613661:613671

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6349581676445696

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Possibly fixed by https://chromium-review.googlesource.com/1359821

Malay, would your change affect any glBlitFramebuffer calls?

Sign in to add a comment