The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/e4230ae9600424369c84d1fa82d177e9ce105a19

commit e4230ae9600424369c84d1fa82d177e9ce105a19
Author: verwaest <verwaest@chromium.org>
Date: Tue Mar 15 10:29:53 2016

Fix debug name inferring wrt proxies

BUG= chromium:594103 
LOG=n

Review URL: https://codereview.chromium.org/1801013003

Cr-Commit-Position: refs/heads/master@{#34776}

[modify] https://crrev.com/e4230ae9600424369c84d1fa82d177e9ce105a19/src/string-stream.cc

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5737817807781888

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (object->IsJSObject()) in src/objects
  
Regressed: V8: r33815:33816

Minimized Testcase (0.08 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv95ArCNb_6CM-ECuB9qmzFrOeBFU91Nk2eDRQlzeiBU_EvKGKcMeecSxLgfRCi1zYFOj0jlpULKvqWwE2CrU2SRW3UzX0QaZKPBqr0i-qAt17Yny78NVmF3Cw6SAdJKPD7Sd81ijPody2dVLJJ_ZTd_SnaheRg
__proto__ = new Proxy({}, { getPrototypeOf() { } });
%OptimizeFunctionOnNextCall();


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot