DCHECK failure in num_imported_functions() <= index in wasm-code-manager.h |
||||||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5344986275774464 Fuzzer: ochang_js_fuzzer Job Type: linux_d8_dbg Platform Id: linux Crash Type: DCHECK failure Crash Address: Crash State: num_imported_functions() <= index in wasm-code-manager.h Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_d8_dbg&range=53255:53256 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5344986275774464 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
May 19 2018
,
May 19 2018
,
May 21 2018
,
May 21 2018
titzer@, clemensh@ seems to be OOO till June, please help to find a new owner, if this needs to be fixed sooner than that.
,
May 21 2018
This is a serious security regression. If you are not able to fix this quickly, please revert the change that introduced it. If this doesn't affect a release branch, or has not been properly classified for severity, please update the Security_Impact or Security_Severity labels, and remove the ReleaseBlock label. To disable this altogether, apply ReleaseBlock-NA. For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
May 22 2018
Removing Release blocker, since this only occurs with --print-code.
,
May 22 2018
The following revision refers to this bug: https://chromium.googlesource.com/v8/v8.git/+/27ad0c849503f0c98014ac848cf9babe2f4f5511 commit 27ad0c849503f0c98014ac848cf9babe2f4f5511 Author: Ben L. Titzer <titzer@chromium.org> Date: Tue May 22 13:36:31 2018 [wasm] Do not log imported function code The wrappers for imports are not accessible through the code() accessor, so avoid tracing them for now. BUG= chromium:844745 R=ahaas@chromium.org Change-Id: I63fe447091ba3c202e3ffcfddfa645049a0b83cf Reviewed-on: https://chromium-review.googlesource.com/1068739 Commit-Queue: Ben Titzer <titzer@chromium.org> Reviewed-by: Andreas Haas <ahaas@chromium.org> Cr-Commit-Position: refs/heads/master@{#53280} [modify] https://crrev.com/27ad0c849503f0c98014ac848cf9babe2f4f5511/src/wasm/wasm-objects.cc
,
May 22 2018
,
May 22 2018
,
May 23 2018
ClusterFuzz has detected this issue as fixed in range 53279:53280. Detailed report: https://clusterfuzz.com/testcase?key=5344986275774464 Fuzzer: ochang_js_fuzzer Job Type: linux_d8_dbg Platform Id: linux Crash Type: DCHECK failure Crash Address: Crash State: num_imported_functions() <= index in wasm-code-manager.h Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_d8_dbg&range=53255:53256 Fixed: https://clusterfuzz.com/revisions?job=linux_d8_dbg&range=53279:53280 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5344986275774464 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
May 23 2018
ClusterFuzz testcase 5344986275774464 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Jul 27
Removing security labels based on c#7 (just cleaning up some bugs with missing labels). |
||||||||||
►
Sign in to add a comment |
||||||||||
Comment 1 by ClusterFuzz
, May 18 2018Owner: clemensh@chromium.org
Status: Assigned (was: Untriaged)