Regression range suggests the following change.

https://chromium.googlesource.com/v8/v8/+/942ed114880b1cf1a72f9aa38d20759dd835b98e

Fixed by subsequent refactor.

ClusterFuzz has detected this issue as fixed in range 37353:37354.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6437927420166144

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: Unreachable code
Crash Address: 
Crash State:
  asm-wasm-builder.cc
  
Regressed: V8: r35045:35048
Fixed: V8: r37353:37354

Minimized Testcase (0.20 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv943MsFvq-4ucawYEDBT0BUI3B0MW0EzOBk5By-I3r5zbRs4_qqgLCKJrwifhD9miW0GqlI_0R9zdfIRrX-VjKGI50rQvTVbhQGEcgSl5OBPXpm4QDmXd0vJO7kvMFjKzS1iJ9MwfP0KGkJntqyJja4Z8n541w?testcase_id=6437927420166144
try {
} catch(e) {; }
  function __f_1(){
    'use asm';
    function __f_3() {
       while(4294967295);
    }
    return { __f_3: __f_3 };
  }
  var __v_9 = Wasm.instantiateModuleFromAsm(__f_1.toString());


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot