New issue
Advanced search Search tips

Issue 898185 link

Starred by 2 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux , Android , Mac
Pri: 3
Type: Bug



Sign in to add a comment

DCHECK hit in InsertImage command

Project Member Reported by ClusterFuzz, Oct 23

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5005759056969728

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  start_position.CompareTo(end_position) <= 0 in serialization.cc
  blink::CreateMarkupAlgorithm<blink::EditingAlgorithm<blink::NodeTraversal> >::Cr
  blink::CreateMarkup
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_chrome_v8_arm&range=545390:545391

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5005759056969728

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.
 
Project Member

Comment 1 by ClusterFuzz, Oct 23

Labels: OS-Mac
Project Member

Comment 2 by ClusterFuzz, Oct 23

Components: Blink>Editing
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 3 by ClusterFuzz, Oct 23

Labels: Test-Predator-Auto-Owner
Owner: xiaoche...@chromium.org
Status: Assigned (was: Untriaged)
Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/8e793a18ec6358414ffc337b336c93d4f6061c91 (Skip non-text svg elements in Most{For/Back}wardCaretPosition).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.
Components: -Blink>Editing Blink>Editing>Command
Labels: -Pri-1 Pri-3
Owner: ----
Status: Available (was: Assigned)
Summary: DCHECK hit in InsertImage command (was: CHECK failure: start_position.CompareTo(end_position) <= 0 in serialization.cc)
Hits a DCHECK before reaching the crash site:

[1:1:1023/160525.561426:FATAL:composite_edit_command.cc(1376)] Check failed: IsStartOfParagraph(start_of_paragraph_to_move). MAP class="CLASS10 CLASS7" (editable)@beforeAnchor/TextAffinity::Downstream
#0 0x000004110a3f base::debug::StackTrace::StackTrace()
#1 0x00000406734b logging::LogMessage::~LogMessage()
#2 0x000006166608 blink::CompositeEditCommand::MoveParagraph()
#3 0x0000061970ec blink::ReplaceSelectionCommand::MergeEndIfNeeded()
#4 0x000006199fb7 blink::ReplaceSelectionCommand::DoApply()
#5 0x00000615e8d0 blink::CompositeEditCommand::Apply()
#6 0x000006186595 blink::InsertCommands::ExecuteInsertFragment()
#7 0x0000061866b3 blink::InsertCommands::ExecuteInsertElement()
#8 0x000006186b74 blink::InsertCommands::ExecuteInsertImage()
#9 0x00000615847e blink::EditorCommand::Execute()

P3/Available due to low usage of InsertImage command.
Project Member

Comment 5 by ClusterFuzz, Oct 28

Labels: OS-Android

Sign in to add a comment