Null-dereference READ in blink::CanvasRenderingContext2D::DrawTextInternal |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6628547603726336 Fuzzer: inferno_canvas_wrecker Job Type: linux_msan_chrome Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: blink::CanvasRenderingContext2D::DrawTextInternal blink::CanvasRenderingContext2D::strokeText blink::V8CanvasRenderingContext2D::strokeTextMethodCallback Sanitizer: memory (MSAN) Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6628547603726336 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information. Note: This crash might not be reproducible with the provided testcase. That said, for the past 14 days we've been seeing this crash frequently. If you are unable to reproduce this, please try a speculative fix based on the crash stacktrace in the report. The fix can be verified by looking at the crash statistics in the report, a day after the fix is deployed. We will auto-close the bug if the crash is not seen for 14 days.
,
Jul 5
This issue seems to be similar to the Issue 857307 . clemensh@ -- Could you please take a look into this issue. Thanks!
,
Jul 5
Not reproducible, and I don't see how it's related to v8. From the stack trace it looks like DrawingCanvas() returned a nullptr. Not actionable from v8's side. Back to the triaging queue. Might just be closed as WontFix.
,
Jul 10
Can't repro this crash, we don't have a minimal test case. Closing as WontFix.
,
Jul 13
,
Jul 16
Issue 863731 has been merged into this issue. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Jul 5Labels: Test-Predator-Auto-Components