From findit tool:

Author: rob.buis
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/3e82b8ae69b92fcb4596114f517bf9c05a21b87b
Time: Tue Aug 02 12:26:33 2016
Lines 47 of file CSSParserToken.cpp which potentially caused crash are changed in this cl (frame #1, "blink::CSSParserToken::CSSParserToken").
Minimum distance from crash line to modified line: 0. (file: CSSParserToken.cpp, crashed on: 47, modified: 47).

Suspected Project: chromium
Suspected Component: Blink>CSS

ClusterFuzz has detected this issue as fixed in range 410518:410604.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5608886310797312

Fuzzer: inferno_twister
Job Type: linux_debug_content_shell_drt
Platform Id: linux

Crash Type: ASSERT
Crash Address: 
Crash State:
  !std::isnan(static_cast<double>(value))
  double clampTo<double, double>
  blink::CSSParserToken::CSSParserToken
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=409173:409180
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_debug_content_shell_drt&range=410518:410604

Minimized Testcase (0.37 Kb): https://cluster-fuzz.appspot.com/download/AMIfv9459krVP8J-V8u5fQ7EyemPvOQ8YTbN9Sx1QU6Z2tTEmSY7rdhdD2awa_C1xF25KMXmXtm-rl7nRLZRd0DukjcwcCITS8koZKrrhXiHNSAu7HtzmxfTI9aFgn_h_ss9TtXQu82VBPUcqGgeWYkwXOd91K1GyA?testcase_id=5608886310797312

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot