Hi reed@, mind taking a look a this or reassigning to someone more familiar? Thanks!

ClusterFuzz has detected this issue as fixed in range 409937:409964.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5427762466914304

Fuzzer: bj_broddelwerk
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: Heap-buffer-overflow WRITE {*}
Crash Address: 0x6030000afd5f
Crash State:
  SkA8_Blitter::blitH
  walk_convex_edges
  sk_fill_path
  
Recommended Security Severity: High

Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=391652:391708
Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=409937:409964

Minimized Testcase (1.08 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96RZhGIFt1SuL_CjHtJDBcFIKPtTO7cCfMJMfNdWGYZfRvB-93AkDVECuCABJnhAZRx8rAimhSYHi19LT_vtF8mhBNdD_MlLJ2iGiRQ3hVrJKaq4uienkmgIvC5n5Ppb5S9xlvG0k8w7b186RGymWKYNvCmdQ?testcase_id=5427762466914304

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Your change meets the bar and is auto-approved for M53 (branch: 2785)

Please merge your change to M53 branch 2785 ASAP (latest before 5:00 PM PT, Friday 08/12) so we can take it in for next week beta. Thank you.

Is there any merge is needed here? If not, please remove "Merge-Approved-53" label. Thank you.

I do not know what fixed this, so I nothing to merge.

Clusterfuzz, you're giving me a headache.  Removing merge labels.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot