New issue
Advanced search Search tips

Issue 871085 link

Starred by 2 users

Issue metadata

Status: Verified
Owner:
Closed: Aug 10
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Mac
Pri: 1
Type: Bug



Sign in to add a comment

Null-dereference READ in spvtools::utils::IntrusiveList<spvtools::opt::Instruction>::begin

Project Member Reported by ClusterFuzz, Aug 5

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5738485617786880

Fuzzer: libFuzzer_spvtools_opt_legalization_fuzzer
Job Type: mac_libfuzzer_chrome_asan
Platform Id: mac

Crash Type: Null-dereference READ
Crash Address: 0x000000000020
Crash State:
  spvtools::utils::IntrusiveList<spvtools::opt::Instruction>::begin
  spvtools::opt::InstructionList::begin
  spvtools::opt::BasicBlock::begin
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=579321:580531

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5738485617786880

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, Aug 5

Components: Internals>GPU>Internals
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Cc: stevenperron@google.com kkaluri@chromium.org
Labels: M-70 CF-NeedsTriage
1. Predator has provided 35 possible suspects
2. Unable to find actual suspect through Predator suspects, code search and also observing no CL's under regression range, hence adding appropriate label 
3. CC'ing the stevenperron@ for his maximum changes in the predator list for further triage.
Owner: dsinclair@chromium.org
Status: Assigned (was: Untriaged)
Project Member

Comment 4 by ClusterFuzz, Aug 10

ClusterFuzz has detected this issue as fixed in range 581954:581993.

Detailed report: https://clusterfuzz.com/testcase?key=5738485617786880

Fuzzer: libFuzzer_spvtools_opt_legalization_fuzzer
Job Type: mac_libfuzzer_chrome_asan
Platform Id: mac

Crash Type: Null-dereference READ
Crash Address: 0x000000000020
Crash State:
  spvtools::utils::IntrusiveList<spvtools::opt::Instruction>::begin
  spvtools::opt::InstructionList::begin
  spvtools::opt::BasicBlock::begin
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=579321:580531
Fixed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=581954:581993

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5738485617786880

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
Project Member

Comment 5 by ClusterFuzz, Aug 10

Labels: ClusterFuzz-Verified
Status: Verified (was: Assigned)
ClusterFuzz testcase 5738485617786880 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Sign in to add a comment