No CL in the regression range changes the crashed files. The result is the blame information.

Author: mstensho@opera.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/822e2a77b10d04b16a27953c7c410f736d414f32
Time: Mon Aug 10 22:50:52 2015
The CL last changed line 114 of file LayoutMultiColumnSet.cpp, which is stack frame 0.

Author: mstensho@opera.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/822e2a77b10d04b16a27953c7c410f736d414f32
Time: Mon Aug 10 22:50:52 2015
The CL last changed line 151 of file LayoutFlowThread.cpp, which is stack frame 1.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/562a7409200d3bffd2e1270e227e36d87724a07c
Time: Wed Dec 09 00:22:43 2015
The CL last changed line 571 of file LayoutMultiColumnFlowThread.cpp, which is stack frame 2.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/562a7409200d3bffd2e1270e227e36d87724a07c
Time: Wed Dec 09 00:22:43 2015
The CL last changed line 569 of file LayoutMultiColumnFlowThread.cpp, which is stack frame 3.

Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/562a7409200d3bffd2e1270e227e36d87724a07c
Time: Wed Dec 09 00:22:43 2015
The CL last changed line 317 of file MultiColumnFragmentainerGroup.cpp, which is stack frame 4.

Author: mstensho@opera.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/de44e7052d58771465b702142273af7faf20992d
Time: Wed Feb 11 12:16:26 2015
The CL last changed line 43 of file MultiColumnFragmentainerGroup.cpp, which is stack frame 5.

Author: mstensho@opera.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/de44e7052d58771465b702142273af7faf20992d
Time: Wed Feb 11 12:16:26 2015
The CL last changed line 328 of file LayoutMultiColumnSet.cpp, which is stack frame 6.

Suspected Project: chromium-blink
Suspected Component: Blink>Layout

Possible suspect :  https://chromium.googlesource.com/chromium/src//+/822e2a77b10d04b16a27953c7c410f736d414f32

Please reassign if this is not related to your change.

Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

This issue has been moved once and is lower than Pri-1. Removing the milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 404631:404810.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6661174976577536

Fuzzer: marty_html_twiddler
Job Type: linux_debug_chrome
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  pageLogicalHeight
  blink::LayoutMultiColumnSet::pageRemainingLogicalHeightForOffset
  blink::LayoutFlowThread::pageRemainingLogicalHeightForOffset
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_chrome&range=357360:357492
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_chrome&range=404631:404810

Minimized Testcase (1.02 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94nEO3IvRnsFHU5WOH-U7keFqNJfXFuEnlx-cnTJaIvNnVOn-11Zo57gWntC9HcivTsSQc7YHTlNF1BCVzZl2WmGvjGeMj_-26ZBft6YOueWF5Ob5zIDLWon4dF0K4whkO8AoowM0ox5apbZL1PYV8-vHjKaQ?testcase_id=6661174976577536

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Marking as fixed as per comment 5.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot