Fatal error in |
||||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5149197747355648 Fuzzer: ochang_js_fuzzer_win Job Type: windows_asan_d8 Platform Id: windows Crash Type: Fatal error Crash Address: Crash State: v8::platform::PrintStackTrace v8::internal::Runtime_AbortJS Builtins_CEntry_Return1_DontSaveFPRegs_ArgvOnStack_NoBuiltinExit Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=51276:51277 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5149197747355648 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for more information.
,
Nov 30
Calling explicitly eval("%AbortJS(message)") with message===undefined;
,
Dec 7
ClusterFuzz testcase 5149197747355648 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.
,
Dec 7
|
||||
►
Sign in to add a comment |
||||
Comment 1 by ClusterFuzz
, Nov 30Owner: cbruni@chromium.org
Status: Assigned (was: Untriaged)