kotenkov@, could you please look into this change (https://chromium.googlesource.com/chromium/src/+/4021ae18b9410d496adc92077e00672253f3876d%5E%21/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp) if possible?

Thank you!

The change is not related to the crash.

Lower to Pri-2, since real world usage of Outdent command is low.

ClusterFuzz has detected this issue as fixed in range 423391:423439.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5675747204661248

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  isStartOfParagraph(startOfParagraphToMove). #text "\n   1 1 R1.1 1.1\n  "@16/Tex
  blink::CompositeEditCommand::moveParagraph
  blink::IndentOutdentCommand::outdentParagraph
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=268656:269696
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=423391:423439

Minimized Testcase (0.37 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96ksl1Dtkomt4xNXbGPZWJ_zNXWVUyLWeMgAm0nsGWj0bj36WccidAjgv-kfCI5NTeceo8Ih8Gu-PlntjUnne8mDwq8SmFro41_ZA4jzd4fnaoLmFjQDC0NI6vzvbKmssw172FT6GXA4-uRYgRitz7CO9PrSQ?testcase_id=5675747204661248
<div>
  </div>
  <div>
   1 1 R1.1 1.1
  <style>
   * {
    visibility: visible;
}
*:only-of-type {
    visibility: collapse;
  </style>
  <script>
onload = function() {
    document.designMode = 'on';
    var __v_1 = document.querySelector('blockquote');
    getSelection().collapse(__v_1, 2);
    document.execCommand('Outdent');
};
</script>
  <blockquote>
   <table>
   <table>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot