kotenkov@, could you please look into this change (https://chromium.googlesource.com/chromium/src/+/4021ae18b9410d496adc92077e00672253f3876d%5E%21/third_party/WebKit/Source/core/editing/commands/ApplyStyleCommand.cpp) if possible?

Thank you!

See https://bugs.chromium.org/p/chromium/issues/detail?id=609652#c3

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5233832441937920

Fuzzer: inferno_twister
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00000008
Crash State:
  blink::ApplyStyleCommand::applyRelativeFontStyleChange
  blink::ApplyStyleCommand::doApply
  blink::CompositeEditCommand::apply
  

Minimized Testcase (0.79 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97YyI72wjdA0UqW0JSFFaS9ibPqBq3_pcv6tDk6Ghs8MCE9gA3LHZRQ741YNSogJ9zd8cuyhy8VzxmztOfbpd9wdLUwQ7vXaBGsQuKdOlaclDYjMcDBuc8A0-_FH4FKEFKwP30rNQDf_ClMfCSk5DUTVZoNQQ?testcase_id=5233832441937920

Filer: mmohammad

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

ClusterFuzz has detected this issue as fixed in range 403746:403751.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5233832441937920

Fuzzer: inferno_twister
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00000008
Crash State:
  blink::ApplyStyleCommand::applyRelativeFontStyleChange
  blink::ApplyStyleCommand::doApply
  blink::CompositeEditCommand::apply
  
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=403746:403751

Minimized Testcase (0.79 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97YyI72wjdA0UqW0JSFFaS9ibPqBq3_pcv6tDk6Ghs8MCE9gA3LHZRQ741YNSogJ9zd8cuyhy8VzxmztOfbpd9wdLUwQ7vXaBGsQuKdOlaclDYjMcDBuc8A0-_FH4FKEFKwP30rNQDf_ClMfCSk5DUTVZoNQQ?testcase_id=5233832441937920

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 403746:403751.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6180192782909440

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  node in ApplyStyleCommand.cpp
  blink::ApplyStyleCommand::applyRelativeFontStyleChange
  blink::ApplyStyleCommand::doApply
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=388139:388165
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=403746:403751

Minimized Testcase (0.79 Kb): https://cluster-fuzz.appspot.com/download/AMIfv973IFjw_Ue3D-HtTBMZ78JzER5mc58Phx5hzne3hDQ6K7zme6WmKb46Vw5liABdgtNZiat1n6a9ilEQYOeymzlQeHvBFfp6aunkeUXobBzzW-IsApG5EZ5CT30Yg6-1Xbf0OgYI4zF8gmibcqmXfGT2_nvw-Q?testcase_id=6180192782909440

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot