providing Findit results for internal purpose:

Suspected CLs	No CL in the regression range changes the crashed files. The result is the blame information.

Author: danakj
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/bda5037a1df2390c268493f608ca9b88b38ca715
Time: Thu Feb 25 10:22:52 2016
The CL last changed line 495 of file Node.h, which is stack frame 0.

Author: rob.buis@samsung.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/8ecea682fb7551b0ba6599c04d3158f54f198ab0
Time: Mon Jan 27 16:43:08 2014
The CL last changed line 1229 of file Range.cpp, which is stack frame 1.

Author: kangil.han@samsung.com
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/300eac0a927c7e827b21158e8f3cc63f232aabd7
Time: Wed Aug 13 06:30:42 2014
The CL last changed line 714 of file Range.cpp, which is stack frame 2.

Suspected Project: chromium
Suspected Component: Blink>DOM

using codesearch, seeing some changes to range.cpp in
https://chromium.googlesource.com/chromium/src/+/a2deac124bc5d4f76bc277c5b712a536bf892feb

yosin@, Could you please take a look at the issue and assign it to concerned developer if your changes are not responsible?

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5645548898222080

Fuzzer: bj_broddelwerk
Job Type: windows_syzyasan_chrome
Platform Id: windows

Crash Type: UNKNOWN
Crash Address: 0x00000003
Crash State:
  blink::Range::checkExtractPrecondition
  blink::Range::extractContents
  blink::Range::surroundContents
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_chrome&range=411953:411957

Minimized Testcase (3.06 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97AUPw54S5eAK2GA2Rk_1k_cICWAp90FU0EIf-Ja2NQ855tFk53c9wSZ72P1ZKc4ZUMtbb6uEGrqGAcMiv52zEY_NdCF-_Og5p4CmqZ8V-e5TS6-N-3eebCQxw_dh_rOIGysYtO1r4C_cXdd8X7A-I8vJEPdA?testcase_id=5645548898222080

Issue manually filed by: ajha

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

ClusterFuzz has detected this issue as fixed in range 413090:413122.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4951061051998208

Fuzzer: attekett_dom_fuzzer
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00000000
Crash State:
  blink::Range::checkExtractPrecondition
  blink::Range::extractContents
  blink::RangeV8Internal::extractContentsMethodCallback
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=397991:398006
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=413090:413122

Minimized Testcase (3.84 Kb): https://cluster-fuzz.appspot.com/download/AMIfv947ptCvBAXuOLkHTfLnWG2IPrkDwtmkrNappdHgfTRWFF_vt45sdmaOP5t44kTL5EYZ466CG38Sd4S5UNrYHQKfoG4pyPry7YQqu9w_V_U8vmNLjjckU11lnLG96gtWKIeXHBws3SP-LXEXB44-3iGiWEADtQ?testcase_id=4951061051998208

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

I could not reproduce on ToT and M54 Stable.

ClusterFuzz has detected this issue as fixed in range 413090:413122.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4951061051998208

Fuzzer: attekett_dom_fuzzer
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00000000
Crash State:
  blink::Range::checkExtractPrecondition
  blink::Range::extractContents
  blink::RangeV8Internal::extractContentsMethodCallback
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=397991:398006
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=413090:413122

Minimized Testcase (3.84 Kb): https://cluster-fuzz.appspot.com/download/AMIfv947ptCvBAXuOLkHTfLnWG2IPrkDwtmkrNappdHgfTRWFF_vt45sdmaOP5t44kTL5EYZ466CG38Sd4S5UNrYHQKfoG4pyPry7YQqu9w_V_U8vmNLjjckU11lnLG96gtWKIeXHBws3SP-LXEXB44-3iGiWEADtQ?testcase_id=4951061051998208

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.