Started in:
https://codereview.chromium.org/2109533002

Fixed in:
https://crrev.com/58920e04bce8435be4c98e36b3c10592ef1b206d

ClusterFuzz has detected this issue as fixed in range 37347:37351.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5370290851020800

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_ignition_dbg
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000020
Crash State:
  v8::InstantiateModuleFromAsm
  v8::internal::FunctionCallbackArguments::Call
  v8::internal::HandleApiCallHelper
  
Fixed: V8: r37347:37351

Minimized Testcase (0.41 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv95mfNKw3JtcHK0t0OgoRmjBwVqXc9igFLtVwEZn_GzFYazc0igsUkW98V1_jz7icCwCYRg8_QpaMzdSYCWX_rfjLJJ4c31RRF5BICY8rwFIRI2dFpxBPRBbXX11zi3yRJAMQdMxr3jZPdq00f9-u4A1D-Zr1w?testcase_id=5370290851020800
__v_1 = "var outer = 0; function test() {'use strict'; outer = 1; } test(); print('ok');";
function __f_2(n) {
  var __v_3 = "(function f" + n + "() { ";
  __v_3 += "(function() { 0 ";
  __v_3 += "})(); return { value: new.target }; })";
  return eval(__v_3);
}
__v_5 = __f_2();
__v_11 = {};
function __f_13(asmfunc) {
  var __v_9 = Wasm.instantiateModuleFromAsm(__v_1);
}
function __f_14() {
  return {
};
}
__f_13( {
});


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot