Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5440344971280384

Fuzzer: mbarbella_js_mutation
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  (val)<=(std::numeric_limits<N>::max()) in v8/src/compiler/operator.cc
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_asan_d8&range=389343:389359

Minimized Testcase (0.52 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97nb0UxIEEyDwecFvkwl0nAQhy9dcEKk1FM19ZS7mlzBPzRT6Qyht4bAY14N0fst4sNmoKol4qtIQ6VKlVh_WxAeK7ocQY4TRhTHr-_9h0M6sBbk_tuncTG_B0fzcpmVkx0wEFFo4ahS4JmAfbaYkzIvwWmAA
function __f_20(length) {
  var __v_10 = "(function () {\n" +
            "  var __v_10 = 0;\n" +
            "  for (var __v_9 = 0; __v_9 <= " + length + "; __v_9++) {\n" +
            "    switch(__v_9) {\n";
  for (var __v_9 = 0; __v_9 < length; __v_9++) {
    __v_10 += "    case " + __v_9 + ": __v_10 += 2; break;\n";
  }
  __v_10 += "    default: __v_10 += 1;\n" +
         "    }\n" +
         "  }\n" +
         "  return __v_0;\n" +
         "})";
  return eval(__v_10);
}
__v_8 = 65535;
__v_11 = __f_20(__v_8);
 __v_11();


Filer: manoranjanr

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.