Null-dereference READ in blink::OffscreenCanvas::Commit |
|||||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6637154776907776 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_content_shell_drt Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: blink::OffscreenCanvas::Commit blink::OffscreenCanvasRenderingContext2D::commit v8::internal::FunctionCallbackArguments::Call Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=576704:576705 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6637154776907776 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Jul 21
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/e7e9abbb51309caae63f0df4754f5f633bc3da77 (Deeper plumbing of CanvasResource into canvas and OffscreenCanvas). If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
,
Jul 21
,
Jul 23
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/bbe5f565a47a630f2be78104a66aefad03a45cfd commit bbe5f565a47a630f2be78104a66aefad03a45cfd Author: Justin Novosad <junov@chromium.org> Date: Mon Jul 23 23:37:29 2018 Add missing null check in OffscreenCanvas::Commit BUG= 866241 Change-Id: Ic789573da753fe1e438778d777556a659fbf0ba9 Reviewed-on: https://chromium-review.googlesource.com/1147460 Reviewed-by: Fernando Serboncini <fserb@chromium.org> Commit-Queue: Justin Novosad <junov@chromium.org> Cr-Commit-Position: refs/heads/master@{#577322} [modify] https://crrev.com/bbe5f565a47a630f2be78104a66aefad03a45cfd/third_party/blink/renderer/core/offscreencanvas/offscreen_canvas.cc
,
Jul 24
ClusterFuzz has detected this issue as fixed in range 577283:577299. Detailed report: https://clusterfuzz.com/testcase?key=6637154776907776 Fuzzer: inferno_layout_test_unmodified Job Type: linux_asan_content_shell_drt Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: blink::OffscreenCanvas::Commit blink::OffscreenCanvasRenderingContext2D::commit v8::internal::FunctionCallbackArguments::Call Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=576704:576705 Fixed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=577283:577299 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6637154776907776 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Jul 24
ClusterFuzz testcase 6637154776907776 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.
,
Jul 24
,
Jul 25
Your change meets the bar and is auto-approved for M69. Please go ahead and merge the CL to branch 3497 manually. Please contact milestone owner if you have questions. Owners: amineer@(Android), kariahda@(iOS), cindyb@(ChromeOS), govind@(Desktop) For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
,
Jul 25
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/c931d0661ae28878bfdddb9b407794ed736c00af commit c931d0661ae28878bfdddb9b407794ed736c00af Author: Justin Novosad <junov@chromium.org> Date: Wed Jul 25 15:20:32 2018 Add missing null check in OffscreenCanvas::Commit BUG= 866241 TBR=junov@chromium.org (cherry picked from commit bbe5f565a47a630f2be78104a66aefad03a45cfd) Change-Id: Ic789573da753fe1e438778d777556a659fbf0ba9 Reviewed-on: https://chromium-review.googlesource.com/1147460 Reviewed-by: Fernando Serboncini <fserb@chromium.org> Commit-Queue: Justin Novosad <junov@chromium.org> Cr-Original-Commit-Position: refs/heads/master@{#577322} Reviewed-on: https://chromium-review.googlesource.com/1150207 Reviewed-by: Justin Novosad <junov@chromium.org> Cr-Commit-Position: refs/branch-heads/3497@{#70} Cr-Branched-From: 271eaf50594eb818c9295dc78d364aea18c82ea8-refs/heads/master@{#576753} [modify] https://crrev.com/c931d0661ae28878bfdddb9b407794ed736c00af/third_party/blink/renderer/core/offscreencanvas/offscreen_canvas.cc |
|||||||
►
Sign in to add a comment |
|||||||
Comment 1 by ClusterFuzz
, Jul 21Labels: Test-Predator-Auto-Components