CHECK failure: std::numeric_limits<unsigned>::max() - data.length() >= result_length in text.cc |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5927143188725760 Fuzzer: inferno_layout_test_unmodified Job Type: windows_asan_chrome_no_sandbox Platform Id: windows Crash Type: CHECK failure Crash Address: Crash State: std::numeric_limits<unsigned>::max() - data.length() >= result_length in text.cc blink::Text::wholeText blink::V8Text::wholeTextAttributeGetterCallback Sanitizer: address (ASAN) Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5927143188725760 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
May 24 2018
This issue looks similar to bug 837914 , hence merging in to it. Feel free to undupe if it's a different issue. Thanks! |
||
►
Sign in to add a comment |
||
Comment 1 by ClusterFuzz
, May 23 2018