Abrt in quic::QuicSession::SendRstStream |
|||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5327808134643712 Fuzzer: libFuzzer_net_quic_stream_factory_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x05390000596d Crash State: quic::QuicSession::SendRstStream net::QuicChromiumClientSession::SendRstStream quic::QuicSpdyClientSessionBase::ResetPromised Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=531452:531461 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5327808134643712 Issue filed automatically. See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
,
Jul 20
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/7f8dd1e122d3c6568768b42adc405cea866fdb11 (Optimize UDPSocketPosix::InternalRecvFrom()). If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
,
Jul 20
[->rch]: Same issue as the other one, I assume.
,
Jul 20
(And no, seeing the description of the other issue, I assume it's completely unrelated)
,
Jul 20
Heh, yeah different :) I've sent out an internal CL which fixes this bug and it should land soon and get merged next week. Thankfully, this is very benign issue so I'm lowering the priority.
,
Jul 24
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/9a6ff125c883080cd6290be1cb5b9dbb072c49e1 commit 9a6ff125c883080cd6290be1cb5b9dbb072c49e1 Author: Ryan Hamilton <rch@chromium.org> Date: Tue Jul 24 18:37:59 2018 Close the QUIC connection if a server promises to push a response on a client-initiated stream id. Merge internal change 205691599. BUG= 865809 Change-Id: I0369074ac0c1e754cc350c37a47681101e35cf12 Reviewed-on: https://chromium-review.googlesource.com/1148640 Reviewed-by: Zhongyi Shi <zhongyi@chromium.org> Commit-Queue: Zhongyi Shi <zhongyi@chromium.org> Cr-Commit-Position: refs/heads/master@{#577620} [modify] https://crrev.com/9a6ff125c883080cd6290be1cb5b9dbb072c49e1/net/third_party/quic/core/http/quic_spdy_client_session_base.cc [modify] https://crrev.com/9a6ff125c883080cd6290be1cb5b9dbb072c49e1/net/third_party/quic/core/http/quic_spdy_client_session_test.cc
,
Jul 25
ClusterFuzz has detected this issue as fixed in range 577618:577620. Detailed report: https://clusterfuzz.com/testcase?key=5327808134643712 Fuzzer: libFuzzer_net_quic_stream_factory_fuzzer Job Type: libfuzzer_chrome_asan_debug Platform Id: linux Crash Type: Abrt Crash Address: 0x05390000596d Crash State: quic::QuicSession::SendRstStream net::QuicChromiumClientSession::SendRstStream quic::QuicSpdyClientSessionBase::ResetPromised Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=531452:531461 Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=577618:577620 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5327808134643712 See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 25
ClusterFuzz testcase 5327808134643712 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
|||||
►
Sign in to add a comment |
|||||
Comment 1 by ClusterFuzz
, Jul 20Labels: Test-Predator-Auto-Components