+ahaas, for https://codereview.chromium.org/2079393003? Please take a look, or find another owner if you can thanks!

This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 37241:37255.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6344839415463936

Fuzzer: decoder_langfuzz
Job Type: linux_asan_chrome_v8_d8
Platform Id: linux

Crash Type: Stack-use-after-return READ 8
Crash Address: 0x7f4213664650
Crash State:
  v8::internal::Object::ToNumber
  v8::internal::Object::ToLength
  v8::internal::Object::CreateListFromArrayLike
  
Regressed: V8: r37168:37191
Fixed: V8: r37241:37255

Minimized Testcase (7.02 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94c8eGhA5kaKLpj2QQrthqbzmL5-5S2AR1_N2NyIijxC0zz4isBjkYPBXL2innLwpboNzrhR7qiF6-g31qjvK_2BG0zzm7Sk6EIYmqJ7PM75I8--NBJgm6ELBwhH9srYcCD7J_jjB4IWFN8tOIdDfOVtIBgGg?testcase_id=6344839415463936

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Adding Merge-Triage label for tracking purposes.

Once your fix had sufficient bake time (on canary, dev as appropriate), please nominate your fix for merge by adding the Merge-Request-XX label, where XX is the Chrome milestone.

When your merge is approved by the release manager, please start merging with higher milestone label first. Make sure to re-request merge for every milestone in the label list. You can get branch information on omahaproxy.appspot.com.

Your fix is very close to the branch point. After the branch happens, please make sure to check if your fix is in.

- Your friendly ClusterFuzz

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot