New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 861557 link

Starred by 1 user

Issue metadata

Status: Verified
Owner:
Closed: Jul 18
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Abrt in rtc::webrtc_checks_impl::FatalLog

Project Member Reported by ClusterFuzz, Jul 7

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5544722840682496

Fuzzer: libFuzzer_audio_processing_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x053900007ec4
Crash State:
  rtc::webrtc_checks_impl::FatalLog
  CallCheckOp<rtc::webrtc_checks_impl::Val<rtc::webrtc_checks_impl::CheckArgType::
  CallCheckOp<rtc::webrtc_checks_impl::Val<rtc::webrtc_checks_impl::CheckArgType::
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=572608:573021

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5544722840682496

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, Jul 7

Cc: kwiberg@webrtc.org mflodman@webrtc.org henrika@webrtc.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Cc: kwiberg@chromium.org kkaluri@chromium.org
Components: Blink>WebRTC
Labels: M-69 Test-Predator-Wrong
Owner: jonasolsson@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, "checks.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://webrtc.googlesource.com/src.git/+/f8e5c110ee806992f4092220339939fe5c2d3cc9

jonasolsson@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!
Cc: ale...@webrtc.org aleloi@chromium.org
Owner: alessiob@chromium.org
Project Member

Comment 4 by bugdroid1@chromium.org, Jul 17

The following revision refers to this bug:
  https://webrtc.googlesource.com/src.git/+/684b401016d6ef40e95a99153512923925ea43d2

commit 684b401016d6ef40e95a99153512923925ea43d2
Author: Alex Loiko <aleloi@webrtc.org>
Date: Tue Jul 17 09:03:05 2018

Division by zero in RNN-VAD.

Bug: webrtc:9450,  chromium:861557 
Change-Id: I00ddda1fe0e088b983707420acf1b9a6763a3535
Reviewed-on: https://webrtc-review.googlesource.com/87841
Reviewed-by: Alessio Bazzica <alessiob@webrtc.org>
Commit-Queue: Alex Loiko <aleloi@webrtc.org>
Cr-Commit-Position: refs/heads/master@{#23999}
[modify] https://crrev.com/684b401016d6ef40e95a99153512923925ea43d2/modules/audio_processing/agc2/rnn_vad/lp_residual.cc

Project Member

Comment 5 by bugdroid1@chromium.org, Jul 17

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/c3323af925e5d404bc1371f22a45e61c5abeb7e7

commit c3323af925e5d404bc1371f22a45e61c5abeb7e7
Author: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Date: Tue Jul 17 23:20:24 2018

Roll src/third_party/webrtc 4597e0c46fc5..dbdb3a00797d (15 commits)

https://webrtc.googlesource.com/src.git/+log/4597e0c46fc5..dbdb3a00797d


git log 4597e0c46fc5..dbdb3a00797d --date=short --no-merges --format='%ad %ae %s'
2018-07-17 stefan@webrtc.org Refactoring PayloadRouter.
2018-07-17 yinwa@webrtc.org Implement congestion window direct pushback to encoders. (Without TaskQueue)
2018-07-17 buildbot@webrtc.org Roll chromium_revision c09887405b..9ec8cfdbc9 (575517:575625)
2018-07-17 sakal@webrtc.org Update CameraCapturer to use the new CapturerObserver.
2018-07-17 ilnik@webrtc.org Revert "Enable simulcast screenshare by default"
2018-07-17 oprypin@webrtc.org Replace accidental usages of source_set with rtc_source_set
2018-07-17 ilnik@webrtc.org Enable simulcast screenshare by default
2018-07-17 mbonadei@webrtc.org Enabling clang::find_bad_constructs for common_audio.
2018-07-17 aleloi@webrtc.org Fuzz more kinds of floats in the APM fuzzer.
2018-07-17 saza@webrtc.org Cap the number of fuzzed decoder packets to 200
2018-07-17 aleloi@webrtc.org Division by zero in RNN-VAD.
2018-07-17 mbonadei@webrtc.org Enabling clang:find_bad_constructs from modules/utility.
2018-07-17 mbonadei@webrtc.org Enabling clang::find_bad_constructs for AEC3.
2018-07-17 stefan@webrtc.org Reland "Move allocation and rtp conversion logic out of payload router."
2018-07-17 pitlicek@gmail.com Call callback in IDLE state


Created with:
  gclient setdep -r src/third_party/webrtc@dbdb3a00797d

The AutoRoll server is located here: https://webrtc-chromium-roll.skia.org

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+/master/autoroll/README.md

If the roll is causing failures, please contact the current sheriff, who should
be CC'd on the roll, and stop the roller if necessary.

CQ_INCLUDE_TRYBOTS=luci.chromium.try:linux_chromium_archive_rel_ng;master.tryserver.chromium.mac:mac_chromium_archive_rel_ng

BUG=chromium:None,chromium:None,chromium:690537,chromium:None,chromium:690537,chromium:840115,chromium:861557
TBR=webrtc-chromium-sheriffs-robots@google.com

Change-Id: I3b5867a0365875ae906aea0d9929dd6529c31160
Reviewed-on: https://chromium-review.googlesource.com/1140903
Reviewed-by: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Commit-Queue: webrtc-chromium-autoroll <webrtc-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Cr-Commit-Position: refs/heads/master@{#575837}
[modify] https://crrev.com/c3323af925e5d404bc1371f22a45e61c5abeb7e7/DEPS

Project Member

Comment 6 by ClusterFuzz, Jul 18

ClusterFuzz has detected this issue as fixed in range 575836:575837.

Detailed report: https://clusterfuzz.com/testcase?key=5544722840682496

Fuzzer: libFuzzer_audio_processing_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Abrt
Crash Address: 0x053900007ec4
Crash State:
  rtc::webrtc_checks_impl::FatalLog
  CallCheckOp<rtc::webrtc_checks_impl::Val<rtc::webrtc_checks_impl::CheckArgType::
  CallCheckOp<rtc::webrtc_checks_impl::Val<rtc::webrtc_checks_impl::CheckArgType::
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=572608:573021
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=575836:575837

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5544722840682496

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 7 by ClusterFuzz, Jul 18

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5544722840682496 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment