The result is a list of CLs that change the crashed files.

Author: joone.hur
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/7cd91bcaaf5ef14b3e76465b464902cd864eaea0
Time: Fri Jul 01 08:59:24 2016
Lines 835 of file ReplaceSelectionCommand.cpp which potentially caused crash are changed in this cl (frame #1, "handleStyleSpansBeforeInsertion").
Minimum distance from crash line to modified line: 0. (file: ReplaceSelectionCommand.cpp, crashed on: 832, modified: 832).

Suspected Project: chromium
===================================

Through code search on file 'CompositeEditCommand.cpp' suspecting the below
https://chromium.googlesource.com/chromium/src/+/54c2f4c9998fc76d13ba11e75cffbfa0f9763c35%5E%21/third_party/WebKit/Source/core/editing/commands/CompositeEditCommand.cpp

keishi@Could you please look into this issue if its related to your change,else please re assign it to an appropriate dev person.

Thanks,

Moving this nonessential bug to the next milestone.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Root cause and stack trace are as same as  issue 626991 

ClusterFuzz has detected this issue as fixed in range 405727:405740.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4725507103129600

Fuzzer: ochang_domfuzzer
Job Type: linux_asan_chrome_mp
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x000000000058
Crash State:
  blink::ReplaceSelectionCommand::doApply
  blink::CompositeEditCommand::applyCommandToComposite
  blink::CompositeEditCommand::moveParagraphs
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=403423:403429
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_mp&range=405727:405740

Minimized Testcase (0.78 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94oGX-nDUdJ0pzKVFw18EfmiT_VKD7YnFLU2g_bI_TkCKsnx5sQfO2ZVQgBLhAcKy-myFoRSlkpYFOhIEmRgdBUyYms5qDZkqiVdXeO_KkO--nCvfU1RLaHJaEYYUaK41gQ6vdeSZraxIcb5tixb-xufSy42w?testcase_id=4725507103129600

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot