Author: paulmeyer
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/8a2dc803cd6c71f8a5c8e48236335e39ecb5bbf0
Time: Tue Feb 02 13:39:18 2016
The CL last changed line 5030 of file render_frame_impl.cc, which is stack frame 0.

@paulmeyer: Assigning to you, request you to please take a look into it. Please help us to reassign if not with respect to your change.

Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This was fixed by https://codereview.chromium.org/1959183002/.

ClusterFuzz has detected this issue as fixed in range 398017:398351.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4860688022896640

Fuzzer: ochang_domfuzzer
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00000000
Crash State:
  content::RenderFrameImpl::OnFind
  bool IPC::MessageT<FrameMsg_Find_Meta, std::__1::tuple<int, std::__1::basic_stri
  content::RenderFrameImpl::OnMessageReceived
  
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=398017:398351

Unminimized Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95n9a0UYhF-EvskCZRB42aW_2-OhGPG3fUJjFFY87knL00n-V0JWC4WxvmhqwgNQwpFQr_5zAdpkCSqvHfpsYVkIdCpkLhzn0dhksyqG0Zd4wpGebuNl0ecAUDBYfcTuxmaK5l-AQOzyeAujlLj-9IdVerR2A?testcase_id=4860688022896640


Additional requirements: Requires Gestures

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot