ClusterFuzz has detected this issue as fixed in range 413426:413430.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4947439857696768

Fuzzer: inferno_layout_test_unmodified
Job Type: mac_asan_content_shell
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x7eb26c96e2f8
Crash State:
  mojo::InterfacePtr<media::mojom::blink::ImageCapture>::reset
  blink::ImageCapture::onServiceConnectionError
  mojo::internal::Router::OnConnectionError
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_content_shell&range=391023:391189
Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_content_shell&range=413426:413430

Minimized Testcase (0.14 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97JwJdrVM-U92wv3905DUcEY1DTQvylNR24gC7heciVPT_H7emD5Ww0M7VF0-KicH1PR17anC3RM7yGLz46TiQ3SobSs06KqaUhM9rNH6D7V4gzL7rwfrmD1j14xzjRHwnZPVq3_3R6Km3SnCs9nHZxcdcLzQ?testcase_id=4947439857696768
<canvas id='canvas0'>
<script>
  var stream = canvas0.captureStream();
  var capturer = new ImageCapture(stream.getVideoTracks()[0]);
</script>


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot