New issue
Advanced search Search tips

Issue 846530 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Closed: Jun 2018
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

CHECK failure: texture_passthrough->target() == target in gles2_cmd_decoder_passthrough_doers.c

Project Member Reported by ClusterFuzz, May 25 2018

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5385044630437888

Fuzzer: libFuzzer_gpu_angle_passthrough_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  texture_passthrough->target() == target in gles2_cmd_decoder_passthrough_doers.c
  gpu::gles2::GLES2DecoderPassthroughImpl::DoBindTexture
  gpu::gles2::GLES2DecoderPassthroughImpl::HandleBindTexture
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=523270:523295

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5385044630437888

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, May 25 2018

Components: Internals>GPU>Internals
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, May 25 2018

Cc: piman@chromium.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Project Member

Comment 3 by ClusterFuzz, May 25 2018

Cc: hubbe@google.com ericrk@chromium.org
Labels: Test-Predator-Auto-CC
Automatically adding ccs based on suspected regression changelists:

Make r16_ext textures work with validating decoder. by hubbe@google.com - https://chromium.googlesource.com/chromium/src/+/37924baf9ac8f3ce7811508bc650efe965bb50b2

Revert "Logging to ensure that non-offscreen surfaces are destroyed as expected" by ericrk@chromium.org - https://chromium.googlesource.com/chromium/src/+/7b9fe37fc214c456257f79ff6e9c76d37657100d

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.

Comment 4 by piman@chromium.org, May 29 2018

Owner: geoffl...@chromium.org
hubbe@/ ericrk@/ piman@ -- Could you please take a look into this issue.

Thanks!
I'm looking at this, fix should be coming soon.
Project Member

Comment 7 by bugdroid1@chromium.org, Jun 1 2018

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/ab52f8be0a3d00e28d88d33e2f0bcfc7a6fd0c3b

commit ab52f8be0a3d00e28d88d33e2f0bcfc7a6fd0c3b
Author: Geoff Lang <geofflang@chromium.org>
Date: Fri Jun 01 17:31:16 2018

Initialize GLContextAttribs for the non-stub GPU fuzzer context.

The default GLContextAttribs did not align with the parameters of the
ContextCreationAttribs passed to the ContextGroup constructor.  This
caused ANGLE's context to enable bind_generates_resource while the
context group thought it was disabled.

BUG= 846530 

Cq-Include-Trybots: luci.chromium.try:android_optional_gpu_tests_rel;luci.chromium.try:linux_optional_gpu_tests_rel;luci.chromium.try:mac_optional_gpu_tests_rel;luci.chromium.try:win_optional_gpu_tests_rel
Change-Id: Ibcd8ccdc703c6152d34924f0f990a329c92ddd1e
Reviewed-on: https://chromium-review.googlesource.com/1082661
Reviewed-by: Antoine Labour <piman@chromium.org>
Commit-Queue: Geoff Lang <geofflang@chromium.org>
Cr-Commit-Position: refs/heads/master@{#563703}
[modify] https://crrev.com/ab52f8be0a3d00e28d88d33e2f0bcfc7a6fd0c3b/gpu/command_buffer/tests/fuzzer_main.cc

Project Member

Comment 8 by ClusterFuzz, Jun 2 2018

ClusterFuzz has detected this issue as fixed in range 563689:563704.

Detailed report: https://clusterfuzz.com/testcase?key=5385044630437888

Fuzzer: libFuzzer_gpu_angle_passthrough_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  texture_passthrough->target() == target in gles2_cmd_decoder_passthrough_doers.c
  gpu::gles2::GLES2DecoderPassthroughImpl::DoBindTexture
  gpu::gles2::GLES2DecoderPassthroughImpl::HandleBindTexture
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=523270:523295
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=563689:563704

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5385044630437888

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 9 by ClusterFuzz, Jun 2 2018

Labels: ClusterFuzz-Verified
Status: Verified (was: Untriaged)
ClusterFuzz testcase 5385044630437888 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment