This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

M53 beta launch is next week.Your bug is labelled as Beta ReleaseBlock, pls make sure to land the fix before 6:00 PM PST, Friday (07/22/16). Thank you.

Can't repro with my latest change. Once that lands, I'll verify that this is fixed.

ClusterFuzz has detected this issue as fixed in range 406291:406462.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4652901201084416

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00009fff8005
Crash State:
  segment
  containsCoincidence
  SkOpSpan::insertCoincidence
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405990:406128
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=406291:406462

Minimized Testcase (0.38 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96CZj4GJ2AanopduPJVmEmmN1RnBiy_4tFbN1fqGZa3xh_XrGzqNqUEaZqDosvVmGWu3BXgXJVsmKJlCf6uBzHZyXG2BUQJoRux11GyVk9-C9RgGZP1y7vA7SUAeZagUXPr3allTyCd368g5N4EeYi7FR-jdw?testcase_id=4652901201084416

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 406291:406462.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4652901201084416

Fuzzer: libfuzzer_skia_pathop_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x00009fff8005
Crash State:
  segment
  containsCoincidence
  SkOpSpan::insertCoincidence
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=405990:406128
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_asan&range=406291:406462

Minimized Testcase (0.38 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96CZj4GJ2AanopduPJVmEmmN1RnBiy_4tFbN1fqGZa3xh_XrGzqNqUEaZqDosvVmGWu3BXgXJVsmKJlCf6uBzHZyXG2BUQJoRux11GyVk9-C9RgGZP1y7vA7SUAeZagUXPr3allTyCd368g5N4EeYi7FR-jdw?testcase_id=4652901201084416

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot