CHECK failure: std::numeric_limits<unsigned>::max() - data.length() >= result_length in text.cc |
||
Issue descriptionDetailed report: https://clusterfuzz.com/testcase?key=5662080405078016 Fuzzer: inferno_layout_test_unmodified Job Type: mac_asan_chrome Platform Id: mac Crash Type: CHECK failure Crash Address: Crash State: std::numeric_limits<unsigned>::max() - data.length() >= result_length in text.cc blink::Text::wholeText blink::V8Text::WholeTextAttributeGetterCallback Sanitizer: address (ASAN) Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=476918:476985 Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5662080405078016 Issue filed automatically. See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally.
,
Jan 3
ClusterFuzz testcase 5662080405078016 is still reproducing on tip-of-tree build (trunk). If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase. Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace. |
||
►
Sign in to add a comment |
||
Comment 1 by pnangunoori@chromium.org
, Dec 27Status: WontFix (was: Untriaged)