Fatal error in |
|||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5178310772129792 Fuzzer: ochang_js_fuzzer_win Job Type: windows_asan_d8 Platform Id: windows Crash Type: Fatal error Crash Address: Crash State: v8::platform::PrintStackTrace v8::internal::Runtime_AbortJS Builtins_CEntry_Return1_DontSaveFPRegs_ArgvInRegister_NoBuiltinExit Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=51276:51277 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5178310772129792 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Nov 16
The repro contains an explicit eval call to %AbortJS: eval("%AbortJS(message)");
,
Nov 23
ClusterFuzz testcase 5178310772129792 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace. |
|||
►
Sign in to add a comment |
|||
Comment 1 by ClusterFuzz
, Nov 9Owner: cbruni@chromium.org
Status: Assigned (was: Untriaged)