New issue
Advanced search Search tips

Issue 918972 link

Starred by 1 user

Issue metadata

Status: Untriaged
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: Linux
Pri: 2
Type: Bug



Sign in to add a comment

Integer-overflow in GrGLIRect::setRelativeTo

Project Member Reported by ClusterFuzz, Jan 3

Issue description

Detailed report: https://clusterfuzz.com/testcase?key=5116596112326656

Fuzzer: jesse_avalanche
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  GrGLIRect::setRelativeTo
  GrGLIRect::setRelativeTo
  GrGLGpu::flushScissor
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=493136:493198

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5116596112326656

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for instructions to reproduce this bug locally.
 
Project Member

Comment 1 by ClusterFuzz, Jan 3

Components: Internals>Skia
Labels: Test-Predator-Auto-Components
Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.
Project Member

Comment 2 by ClusterFuzz, Jan 3

Cc: robertph...@google.com
Labels: Test-Predator-Auto-CC
Automatically adding ccs based on suspected regression changelists:

Store GrRenderTarget in GrGpuCommandBuffer by robertphillips@google.com - https://skia.googlesource.com/skia/+/19e51dcd1eb0bcdc70f29620ce4ca30ddbfc2042

Revert "Store discard request on the opList and remove GrDiscardOp" by robertphillips@google.com - https://skia.googlesource.com/skia/+/54190c42dd721b9b1db5a524fa3955625de99b84

Store discard request on the opList and remove GrDiscardOp by robertphillips@google.com - https://skia.googlesource.com/skia/+/b681a0f1b0acebe36130fd463d14016d48295b97

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label.

Sign in to add a comment