The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/8758245a62c152bc23dcbb8cdc6ceac9693b52f0

commit 8758245a62c152bc23dcbb8cdc6ceac9693b52f0
Author: ishell <ishell@chromium.org>
Date: Mon May 09 09:00:04 2016

Don't crash when load eval origin of a call site.

BUG= chromium:610207 
LOG=N

Review-Url: https://codereview.chromium.org/1958043002
Cr-Commit-Position: refs/heads/master@{#36101}

[modify] https://crrev.com/8758245a62c152bc23dcbb8cdc6ceac9693b52f0/src/accessors.cc
[add] https://crrev.com/8758245a62c152bc23dcbb8cdc6ceac9693b52f0/test/mjsunit/regress/regress-crbug-610207.js

ClusterFuzz has detected this issue as fixed in range 36100:36101.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4966797236764672

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (object->IsSharedFunctionInfo()) in s
  
Fixed: V8: r36100:36101

Minimized Testcase (0.48 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97nN0GDBZg4gxqNSdIx8K8lkv7as5bRev41uhqndPG3yAMp98gdeGcpRjksP7ne_qWdIH7uAYkeDHSqyvTA9z6w-g1FiYEGoqU2GHpMVsxA1_TcHYAX1iIkOoqfxU2rf89lGmFv-DFygPiIthRSpQFA2DVPeA
Error.prepareStackTrace = function(exception, frames) {
  return frames[0].getEvalOrigin();
}
var __v_38 = [Realm.current()];
for (__v_37 in __v_38) {
  Realm.eval(__v_38[__v_37],"                                                       \
      with('irrelevant') {                                                     \
        Realm.shared.results.push(return_this());                              \
      }                                                                        \
    ");
}


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot