Float-cast-overflow in scrollTopAttributeSetter |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4535078085197824 Fuzzer: puzzor_svg Job Type: linux_ubsan_chrome Platform Id: linux Crash Type: Float-cast-overflow Crash Address: Crash State: scrollTopAttributeSetter blink::V8Element::scrollTopAttributeSetterCallback v8::internal::FunctionCallbackArguments::Call Sanitizer: undefined (UBSAN) Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=551565:563900 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4535078085197824 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Jun 12 2018
Automatically adding ccs based on suspected regression changelists: Allow function callbacks to have Proxy as receiver. by yangguo@chromium.org - https://chromium.googlesource.com/v8/v8/+/9fb02b526f1cd3b859a530a01adb08bc0d089f4f [objects.h splitting] Move classes related to api callbacks. by marja@chromium.org - https://chromium.googlesource.com/v8/v8/+/a9db2c74b5bae2345ac52be404748954a3b5050d If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.
,
Jun 19 2018
to cf sheriff for further investigation
,
Jul 3
Issue 852856 has been merged into this issue. |
|||
►
Sign in to add a comment |
|||
Comment 1 by ClusterFuzz
, Jun 12 2018Labels: Test-Predator-Auto-Components