New issue
Advanced search Search tips

Issue 903238 link

Starred by 3 users

Issue metadata

Status: Assigned
Owner:
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 1
Type: Bug



Sign in to add a comment

Out-of-memory in merkle_integrity_source_stream_fuzzer

Project Member Reported by ClusterFuzz, Nov 8

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5165939924140032

Fuzzer: libFuzzer_merkle_integrity_source_stream_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  merkle_integrity_source_stream_fuzzer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=585308:585313

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5165939924140032

Issue filed automatically.

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.
 
Project Member

Comment 1 by ClusterFuzz, Nov 8

Cc: davidben@chromium.org
Labels: ClusterFuzz-Auto-CC
Automatically adding ccs based on OWNERS file / target commit history.

If this is incorrect, please add ClusterFuzz-Wrong label.
Cc: kkaluri@chromium.org
Labels: M-71 Test-Predator-Wrong CF-NeedsTriage
Unable to find actual suspect through code search and also observing no CL's under regression range, hence adding appropriate label and requesting someone from dev team to look in to this issue.

Thanks!
Components: Blink>WebHD>WebPackaging
Cc: infe...@chromium.org
Actually, looking at the stack trace (didn't look at it earlier), this issue appears to be external to the fuzzer, unless there was a leak from previous runs and the fuzzer infrastructure's being blamed.

+inferno, thoughts?
Labels: -CF-NeedsTriage
Project Member

Comment 6 by ClusterFuzz, Dec 1

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 5165939924140032 appears to be flaky, updating reproducibility label.
Labels: -Unreproducible Reproducible
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
Cc: -infe...@chromium.org
Owner: infe...@chromium.org
inferno: Could you take a look at this? The stack trace suggests that the OOM is happening in libFuzzer infrastructure rather than the fuzzer itself. Thanks!
Project Member

Comment 9 by ClusterFuzz, Jan 4

Labels: -Reproducible Unreproducible
ClusterFuzz testcase 5165939924140032 appears to be flaky, updating reproducibility label.
Labels: -Unreproducible Reproducible
Please ignore the last comment about testcase being unreproducible. The testcase is still reproducible. This happened due to a code refactoring on ClusterFuzz side, and the underlying root cause is now fixed. Resetting the label back to Reproducible. Sorry about the inconvenience caused from these incorrect notifications.
Comment 8 by davidben
Status: Assigned (was: Untriaged)
This issue has an owner, a component and a priority, but is still listed as untriaged or unconfirmed. By definition, this bug is triaged. Changing status to "assigned". Please reach out to me if you disagree with how I've done this.

Sign in to add a comment