New issue
Advanced search Search tips

Issue 875105 link

Starred by 1 user
Status: Duplicate
Merged: issue 859406
Owner:
mstensho@chromium.org
Closed: Aug 17
Cc:
kkaluri@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Stack-overflow in blink::InlineFlowBox::PlaceBoxesInBlockDirection

Project Member Reported by ClusterFuzz, Aug 16 
Detailed report: https://clusterfuzz.com/testcase?key=6672820453769216

Fuzzer: inferno_twister
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: Stack-overflow
Crash Address: 0xff789a40
Crash State:
  blink::InlineFlowBox::PlaceBoxesInBlockDirection
  
Sanitizer: address (ASAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6672820453769216

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.

Comment 1 by kkaluri@chromium.org, Aug 17

Cc: kkaluri@chromium.org
Components: Blink>Layout
Labels: M-69 Test-Predator-Wrong
Owner: mstensho@chromium.org
Status: Assigned (was: Untriaged)
Predator and CL could not provide any possible suspects.

Using Code Search for the file, " inline_flow_box.cc" suspecting the below Cl might have caused this issue

Suspect CL: https://chromium.googlesource.com/chromium/src/+/0e7d0d12eade3a80ef79e6c19a14bade77cc5b8e

mstensho@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner.

Thanks!

Comment 2 by mstensho@chromium.org, Aug 17

Mergedinto: 859406
Status: Duplicate (was: Assigned)
►

Sign in to add a comment