New issue
Advanced search Search tips

Issue 855836 link

Starred by 1 user
Status: Verified
Owner:
chrishtr@chromium.org
Closed: Jul 7
Cc:
pnangunoori@chromium.org
wangxianzhu@chromium.org
chrishtr@chromium.org
vmp...@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

CHECK failure: context.paint_invalidation_container == object.ContainerForPaintInvalidation() i

Project Member Reported by ClusterFuzz, Jun 23 2018 
Detailed report: https://clusterfuzz.com/testcase?key=5959454378688512

Fuzzer: marty_html_twiddler
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  context.paint_invalidation_container == object.ContainerForPaintInvalidation() i
  blink::PaintInvalidator::UpdatePaintInvalidationContainer
  blink::PaintInvalidator::InvalidatePaint
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5959454378688512

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by pnangunoori@chromium.org, Jun 28 2018

Cc: pnangunoori@chromium.org
Components: Blink>Paint
Labels: M-69 Test-Predator-Wrong
Owner: wangxianzhu@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.
Using the code search for the file, “paint_invalidator.cc” assigning to concern owner from GIT revision log.
Suspecting Commit#
https://chromium.googlesource.com/chromium/src/+/34eef3f8a4801a129feba98afd109b8f7e7062e8

@wangxianzhu -- Could you please look into this issue, kindly reassign if it has nothing to do with your changes.
Thank You.

Comment 2 by wangxianzhu@chromium.org, Jul 2

Cc: wangxianzhu@chromium.org
Owner: chrishtr@chromium.org
I may not get time to fix this bug. chrishtr@ can you take a look?

Comment 3 by chrishtr@chromium.org, Jul 3 

Reduced testcase attached. Looks like another case of floats failing
to be contained by positioned inlines ( issue 823748 ).
test.html
173 bytes View Download
Project Member

Comment 4 by ClusterFuzz, Jul 5

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 5959454378688512 appears to be flaky, updating reproducibility label.

Comment 5 by chrishtr@chromium.org, Jul 6

Labels: -Pri-1 Pri-2

Comment 6 by chrishtr@chromium.org, Jul 6

Cc: chrishtr@chromium.org
 Issue 860568  has been merged into this issue.
Project Member

Comment 7 by ClusterFuzz, Jul 7

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5997426218106880 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
►

Sign in to add a comment