Suspected CL: https://chromium.googlesource.com/chromium/src/+/468ca56ab508342df50c7ee16ac4f4e767a1614b
wangxianzhu@ could you please look into this. Thanks

My CL is unrelated because it's about paint invalidation while the crash is during layout.

The test case is not minimized so unable to analyze it. It seems that it tries to create a very deep DOM for which stack overflow is unavoidable.

ClusterFuzz has detected this testcase as flaky and is unable to reproduce it in the original crash revision. Skipping fixed testing check and marking it as potentially fixed.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4813179581890560

Fuzzer: bj_broddelwerk
Job Type: linux_asan_chrome_mp
Platform Id: linux

Crash Type: Stack-overflow
Crash Address: 0x7ffde0cb1fd8
Crash State:
  blink::LayoutTable::recalcSections
  blink::LayoutTable::computePreferredLogicalWidths
  blink::LayoutBox::minPreferredLogicalWidth
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=133679:133688

Minimized Testcase (3.00 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95J0ehSWlEbzt8tJnIKVe0i_urhlrECl7R6jpZ3zVS9BB9y6RCxeI3jzlf4YbnWB3JNjzFLZS2vUvS32IeRuy7CBePCsDNbJ1_IMFdvvok48h-rIp_MOPbb0GZJH3QrbyJlqV4btZe5i7ct5IMU4u320jscDg?testcase_id=4813179581890560

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot