Suspected CLs	No CL in the regression range changes the crashed files. The result is the blame information.

Author: sigbjornf
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/3e5bcb132b1af136ba6faa1c152dcba2c298549f
Time: Mon May 23 14:28:16 2016
The CL last changed line 75 of file Member.h, which is stack frame 0.

Author: darin
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/33030df92939cbc4e3097d21ba3995b64d723093
Time: Mon Mar 20 02:57:59 2006
The CL last changed line 200 of file Node.h, which is stack frame 1.

Author: adam.treat@samsung.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/ee809a85a24df299c26e2f34346a4c058e4ebf8d
Time: Fri Jan 10 18:47:04 2014
The CL last changed line 293 of file NodeTraversal.h, which is stack frame 2.

Author: keishi
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/54c2f4c9998fc76d13ba11e75cffbfa0f9763c35
Time: Mon Apr 11 04:04:55 2016
The CL last changed line 1117 of file CompositeEditCommand.cpp, which is stack frame 3.

Author: yosin
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/87a847835586d42e3a097a8659b071883b4c83a1
Time: Wed Feb 10 07:20:01 2016
The CL last changed line 1209 of file CompositeEditCommand.cpp, which is stack frame 4.

Author: keishi
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/54c2f4c9998fc76d13ba11e75cffbfa0f9763c35
Time: Mon Apr 11 04:04:55 2016
The CL last changed line 103 of file FormatBlockCommand.cpp, which is stack frame 5.

Author: tkent
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/7f6bd2b6a8e6e4858afd1f1b23d768030a01af69
Time: Wed Feb 10 02:54:06 2016
The CL last changed line 145 of file ApplyBlockElementCommand.cpp, which is stack frame 6.

Suspected Project: chromium-blink
Suspected Component: Blink>DOM

From the above Find It result, suspecting: https://codereview.chromium.org/1999363002 from stack frame 0.

sigbjornf@: Could you please take a look at this.

Thank you!

Hit DCHECK(a.isNotNull()) in comparePositions(a, b)

It seems endOfNextParagrahSplittingTextNodesIfNeeded() makes |start| to null,
since Text node is out of BODY element.

DOM tree at assertion:
endOfParagraphToMove.showTreeForThis()
#document	0000025CCCA024A0
	HTML	0000025CCCA02FD0 (editable)
		BODY	0000025CCCA032E8 CLASS="CLASS9 CLASS7" (editable)
			#text	0000025CCCA03350 "\n"
			INS	0000025CCCA033A0 (editable)
				#text	0000025CCCA03408 "\n"
				svg	0000025CCCA03458 (editable)
					#text	0000025CCCA035B0 "\n"
			#text	0000025CCCA03600 ""
			HEAD	0000025CCCA03038 (editable)
				SCRIPT	0000025CCCA030A0 (editable)
					#text	0000025CCCA03118 "...script..."
				#text	0000025CCCA03168 "\n"
				STYLE	0000025CCCA031B8 (editable)
					#text	0000025CCCA03248 "\n.CLASS7{-webkit-hyphens:initial;display:inline;"
				#text	0000025CCCA03298 "\n"
			DL	0000025CCCA036F0 (editable)
			#text	0000025CCCA036A0 "\n"
*		#text	0000025CCCA03650 "i4****[S[[[[[[2:3}}}}}}}}}}}}"J'"

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz testcase 6634147296837632 is flaky and no longer reproduces, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.