ClusterFuzz has detected this issue as fixed in range 34834:34835.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6544999918862336

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  *deopt_index != Safepoint::kNoDeoptimizationIndex in src/frames.cc
  
Regressed: V8: r34829:34830
Fixed: V8: r34834:34835

Minimized Testcase (0.08 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97XYcH-bs20wsAR_F4J-wMgC-90j7Br7Dt5w2BtU2o_CSj1gTPo-qiARTheTeSAWrAdgjPcjvdR6N7izYT7TlwU6Wr6bJZzZQ49asCeKbcPfERnNa1Ymy4BTJ4xeu7Vk4DsbbVKQgiHlw7_yIyfwT33Rv_BuQ
"use strict";
function __f_4(__v_5) {
  return __v_5.x();
}
  __f_4({ x: 1 });


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/e6dca379b633682e64542c86ed68941ccca221f0

commit e6dca379b633682e64542c86ed68941ccca221f0
Author: ishell <ishell@chromium.org>
Date: Mon Mar 21 19:22:35 2016

[crankshaft] Check if the function is callable before generating a tail call via Call builtin.

This is necessary to ensure that "Called non callable" exception will get a proper message and stack trace even for calls at tail position.

BUG= chromium:595615 , v8:4698
LOG=N

Review URL: https://codereview.chromium.org/1818003002

Cr-Commit-Position: refs/heads/master@{#34962}

[modify] https://crrev.com/e6dca379b633682e64542c86ed68941ccca221f0/src/crankshaft/hydrogen.cc
[modify] https://crrev.com/e6dca379b633682e64542c86ed68941ccca221f0/src/crankshaft/hydrogen.h
[add] https://crrev.com/e6dca379b633682e64542c86ed68941ccca221f0/test/mjsunit/regress/regress-crbug-595615.js

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot