Suspecting CL :
Author: wangxianzhu
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/2848739b13b1f454930307439ba00ddd55bb9b40
Time: Wed May 11 05:33:37 2016
Lines 169 of file LayoutBoxModelObject.cpp which potentially caused crash are changed in this cl (frame #3, "blink::LayoutBoxModelObject::styleWillChange").

File LayoutBox.cpp is changed in this cl (and is part of stack frame #4, "blink::LayoutBox::styleWillChange")
Minimum distance from crash line to modified line: 0. (file: LayoutBoxModelObject.cpp, crashed on: 169, modified: 169).

Suspected Project: chromium
Suspected Component: Blink>Layout

ClusterFuzz has detected this issue as fixed in range 392933:393062.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6125076667170816

Fuzzer: inferno_twister
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x0000005c
Crash State:
  blink::PaintLayerClipper::clearClipRectsIncludingDescendants
  blink::LayoutBoxModelObject::styleWillChange
  blink::LayoutBox::styleWillChange
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=392834:392865
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=392933:393062

Minimized Testcase (0.23 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94CSYNu21_M27AVojFWLFj6Lqh4wIudhNadn9cOQOvL9bfg0jzECmf1gvKgkkB840_ZYbDrNWdDrFLftc6Qxy52EyqijMhypa1GipBpSQDddb5aqb2947IBDpk8ez9j7ZcSeJXIlfCYZ91EylGFKM9Kpk328A

Additional requirements: Requires HTTP

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot