Fatal error in |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=4628797073391616 Fuzzer: ochang_js_fuzzer_win Job Type: windows_asan_d8 Platform Id: windows Crash Type: Fatal error Crash Address: Crash State: v8::platform::PrintStackTrace v8::internal::Runtime_AbortJS v8::internal::DefaultEmbeddedBlobSize Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=51276:51277 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4628797073391616 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Jul 30
The test case uses eval("%AbortJS(message)") directly and thus causes a crash.
,
Jul 31
This crash occurs very frequently on windows platform and is likely preventing the fuzzer ochang_js_fuzzer_win from making much progress. Fixing this will allow more bugs to be found. Marking this bug as a blocker for next Beta release. If this is incorrect, please add ClusterFuzz-Wrong label and remove the ReleaseBlock-Beta label.
,
Aug 6
ClusterFuzz testcase 4628797073391616 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Jul 27Owner: cbruni@chromium.org
Status: Assigned (was: Untriaged)