Author: wangxianzhu
Component: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/e3e7bae15616191d743019b9a5b77ac201aec20e
Time: Mon Feb 29 19:37:40 2016
Lines 1472-1479 of file PaintLayer.cpp which potentially caused crash are changed in this cl (frame #5, "blink::PaintLayer::updateScrollableArea").
Minimum distance from crash line to modified line: 0. (file: PaintLayer.cpp, crashed on: 1472, modified: 1472).

Suspected Component: chromium
Suspected Cr- Label: Cr-Blink-Paint

@wangxianzhu: Request you to please take a look into it. Please help us to reassign if not with respect to your change.

ClusterFuzz has detected this issue as fixed in range 378770:378857.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4634389096431616

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: UNKNOWN
Crash Address: 0x00000000003c
Crash State:
  blink::LayoutObject::LayoutObjectBitfields::isAnonymous
  blink::LayoutObject::isAnonymous
  blink::LayoutObject::node
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=378207:378422
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=378770:378857

Minimized Testcase (0.34 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv94gkvPNIb0hLpYxN4bnss7MFf7agvspzfCy2by5F7KEP_was_GcaIEuFi3lsDC8GFmZcRXZsZn_FZJKC7mSvGkEi6vWz4lhsE1VtkQwUOqo9enWI5weB7aty6a2h0w3gLJzzByHcOwg4z2FiOby5Mw-Rh0NJw
<style>
.c7 { dipslay: none; resize: auto; mix-blend-mode: luminosity;</style><script>
var docElement = document.body ? document.body : document.documentElement;
tCF47 = document.createElementNS("http://www.w3.org/1999/xhtml", "myelement");
tCF47.setAttribute("class", "c7");
docElement.appendChild(tCF47);
function tCF_custom_7() {
}
</script>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot