Suspected CLs	Regression information is not available. The result is the blame information.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/59bc118f74edef7b3e4a2f5f2010066893aa27bb
Time: Wed Jan 20 04:09:18 2016
The CL last changed line 135 of file LayoutMultiColumnSet.cpp, which is stack frame 0.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/6692bea7c8d9afb6c4f23c6194ecacc3a4bddbe8
Time: Thu Nov 26 00:47:04 2015
The CL last changed line 169 of file LayoutFlowThread.cpp, which is stack frame 1.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/6692bea7c8d9afb6c4f23c6194ecacc3a4bddbe8
Time: Thu Nov 26 00:47:04 2015
The CL last changed line 2603 of file LayoutBlock.cpp, which is stack frame 2.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/6692bea7c8d9afb6c4f23c6194ecacc3a4bddbe8
Time: Thu Nov 26 00:47:04 2015
The CL last changed line 797 of file LayoutBlockFlow.cpp, which is stack frame 3.

Author: mstensho@opera.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/71965de7a18445200d132ee9339f3e0b92c2f29e
Time: Wed Jul 08 20:51:06 2015
The CL last changed line 916 of file LayoutBlockFlowLine.cpp, which is stack frame 4.

Author: eae@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/48ed17cf1d50988a715c1d367dc810d575dcb359
Time: Thu Jul 31 20:05:09 2014
The CL last changed line 778 of file LayoutBlockFlowLine.cpp, which is stack frame 5.

Author: leviw@chromium.org
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/b40f5755401fe50b434912aa7400d61b6cbbdb9f
Time: Sat Jan 25 00:19:25 2014
The CL last changed line 1604 of file LayoutBlockFlowLine.cpp, which is stack frame 6.

Suspected Project: chromium
Suspected Component: Blink>Layout

ClusterFuzz has detected this issue as fixed in range 387987:388050.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4959505267294208

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  ASSERTION FAILED: flowThreadOffset.mightBeSaturated() || pageLogicalTopForOffset
  blink::LayoutMultiColumnSet::nextLogicalTopForUnbreakableContent
  blink::LayoutFlowThread::nextLogicalTopForUnbreakableContent
  
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=387987:388050

Minimized Testcase (9.11 Kb): https://cluster-fuzz.appspot.com/download/AMIfv940FSw_sovKShp4c-A7oCibvVnfB19tuTHsvv_bK4sBkI4nZ7l0fcFXenVfyY1jyrDPcmiY5Lj9utajpRQuAIdTXBm4QX3SksIbOlSb-otlLD_AIDfT4M4BfRcTH49pdrw-vFmAHJKk1K76xHc6xbP_wG62Rg

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Yeah, looks like this one got fixed by https://codereview.chromium.org/1895003002

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot