New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 857261 link

Starred by 1 user
Status: Fixed
Owner:
█ junov@chromium.org
Last visit > 30 days ago
Closed: Jun 2018
Cc:
█ xlai@chromium.org
pnangunoori@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference READ in blink::Canvas2DLayerBridge::Hibernate

Project Member Reported by ClusterFuzz, Jun 27 2018 
Detailed report: https://clusterfuzz.com/testcase?key=5492991704432640

Fuzzer: inferno_twister_c
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000000
Crash State:
  blink::Canvas2DLayerBridge::Hibernate
  void base::internal::FunctorTraits<void
  void base::internal::FunctorTraits<void
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=520614:520652

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5492991704432640

Additional requirements: Requires HTTP

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
Project Member

Comment 1 by ClusterFuzz, Jun 27 2018

Components: Blink>Paint Internals>Core
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Jun 27 2018

Cc: xlai@chromium.org l...@chromium.org
Labels: Test-Predator-Auto-CC
Automatically adding ccs based on suspected regression changelists:

Do not skip overdraw optimization for non-display-list-2d canvas by xlai@chromium.org - https://chromium.googlesource.com/chromium/src/+/74f45cf7fd9cdd165d04d6079cb54a56a1a47075

Reland "[scheduler] Add per-thread task duration UMA." by lpy@chromium.org - https://chromium.googlesource.com/chromium/src/+/01faae55d5cc2581cb95ea5a8f48c63bc67961e2

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.

Comment 3 by schenney@chromium.org, Jun 28 2018

Cc: -xlai@chromium.org -l...@chromium.org
Components: -Blink>Paint -Internals>Core Blink>Canvas
Owner: xlai@chromium.org

Comment 4 by schenney@chromium.org, Jun 28 2018

Cc: xlai@chromium.org
Owner: ----

Comment 5 by pnangunoori@chromium.org, Jun 28 2018

Cc: pnangunoori@chromium.org
Labels: Test-Predator-Wrong-CLs M-68
Owner: khushals...@chromium.org
Status: Assigned (was: Untriaged)
As per the  Issue 854949  owner, assigning this issue to @khushalsagar.
@dcheng -- Could you please look into this issue, kindly reassign if it has nothing to do with your changes.
Thanks.

Comment 6 by pnangunoori@chromium.org, Jun 28 2018 

@khushalsagar -- Could you please look into this issue, kindly reassign if it has nothing to do with your changes.
Thanks.

Comment 7 by fs...@chromium.org, Jun 29 2018

Owner: junov@chromium.org
Status: Fixed (was: Assigned)
Project Member

Comment 8 by ClusterFuzz, Jul 6

Labels: Needs-Feedback
ClusterFuzz testcase 5492991704432640 is still reproducing on tip-of-tree build (trunk).

Please re-test your fix against this testcase and if the fix was incorrect or incomplete, please re-open the bug. Otherwise, ignore this notification and add ClusterFuzz-Wrong label.
Project Member

Comment 9 by ClusterFuzz, Jul 12

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 5492991704432640 appears to be flaky, updating reproducibility label.
►

Sign in to add a comment