Null-dereference READ in chrome |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=6723968772603904 Fuzzer: mbarbella_js_mutation_layout Job Type: linux_cfi_chrome Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000480 Crash State: chrome blink::WebRemoteFrameImpl::GetCompositingRect content::RenderFrameProxy::SynchronizeVisualProperties Sanitizer: cfi (CFI) Regressed: https://clusterfuzz.com/revisions?job=linux_cfi_chrome&range=546953:546996 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6723968772603904 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Sep 10
Looks like an OOPIF issue due to WebRemoteFrame
,
Sep 12
Predator has provided 4 possible suspects 1. [Webauthn] Handle duplicate registrations with InvalidStateError by kpaulhamus@chromium.org 2. Prepare LayoutTest expectations for BigInt by jkummerow@chromium.org 3. Remove Syzygy/SyzyASAN build configuration and related code. by siggi@chromium.org 4. DevTools: Search sidebars for source and network by eostroukhov@chromium.org Using Code Search for the file, "web_remote_frame_impl.cc" suspecting the below Cl might have caused this issue Suspect CL: https://chromium.googlesource.com/chromium/src/+/75dd4f69952c16ed3c5a987081d9c1e9d3c13927 kenrb@ -- Could you please check whether this is caused with respect to your change, if not please help us in assigning it to the right owner. Thanks!
,
Sep 13
ClusterFuzz has detected this issue as fixed in range 590752:590780. Detailed report: https://clusterfuzz.com/testcase?key=6723968772603904 Fuzzer: mbarbella_js_mutation_layout Job Type: linux_cfi_chrome Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000480 Crash State: chrome blink::WebRemoteFrameImpl::GetCompositingRect content::RenderFrameProxy::SynchronizeVisualProperties Sanitizer: cfi (CFI) Regressed: https://clusterfuzz.com/revisions?job=linux_cfi_chrome&range=546953:546996 Fixed: https://clusterfuzz.com/revisions?job=linux_cfi_chrome&range=590752:590780 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6723968772603904 See https://github.com/google/clusterfuzz-tools for more information. If you suspect that the result above is incorrect, try re-doing that job on the test case report page.
,
Sep 13
ClusterFuzz testcase 6723968772603904 is verified as fixed, so closing issue as verified. If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue. |
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Sep 9Labels: Test-Predator-Auto-Components