Null-dereference READ in unsigned long v8::base::AsAtomicWord::Relaxed_Load<unsigned long> |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6049058159067136 Fuzzer: ochang_js_fuzzer Job Type: linux_cfi_d8 Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: unsigned long v8::base::AsAtomicWord::Relaxed_Load<unsigned long> bool v8::internal::MemoryChunk::IsFlagSet< RecordSlot Sanitizer: cfi (CFI) Regressed: https://clusterfuzz.com/revisions?job=linux_cfi_d8&range=54973:54974 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6049058159067136 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Aug 9
Assigning mvstanton@ to take a look, since CF bisected it to that CL, and the test has splice in it. Did not reproduce with my ToT debug build with the provided gn args, but did not try the clusterfuzz reproduction script due to an authentication issue.
,
Oct 19
The CL was re-submitted a month later with important changes. I think we can just close this one. |
||
►
Sign in to add a comment |
||
Comment 1 by mstarzinger@chromium.org
, Aug 9Status: Assigned (was: Untriaged)