Findit Result:
==============
Suspected CLs	No CL in the regression range changes the crashed files. The result is the blame information.

Author: Peter Kasting
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/275539a60ec716bea022200fa650a409772a81bf
Time: Wed Jun 15 01:41:42 2016
The CL last changed line 77 of file rect.h, which is stack frame 0.

Author: danakj
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/a5cc021b6ee19af6a931db1042ec2ab562506010
Time: Wed Oct 15 21:27:42 2014
The CL last changed line 126 of file rect.cc, which is stack frame 4.

Author: vmpstr
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/65d8098f4449c3a556b8ca588a2ab0ec6c702eff
Time: Mon Jun 15 23:20:13 2015
The CL last changed line 517 of file picture_layer_impl.cc, which is stack frame 5.

Author: hush
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src//+/9178c77a0167ee7c73364b21a6f3a633029b7a44
Time: Thu Jan 22 01:57:39 2015
The CL last changed line 455 of file picture_layer_impl.cc, which is stack frame 6.

Suspected Project: chromium-buildtools
================================================

None of the CL from the above findit result looks related.

Based on the code search on 'rect.h', suspected change: https://codereview.chromium.org/1543183002

avi@: Could you please take a look at this and help in investigating this further.

Thank you!

Integer overflow is a misuse of gfx::Rect. My change was to the internals of gfx::Rect.

The first stack frame of the use is cc::PictureLayerImpl::UpdateViewportRectForTilePriorityInContentSpace. Assigning to an owner of that.

This maybe a duplicate of  issue 635511  or maybe a similar issue.  Assigning to vmpstr to investigate as well.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/fc7eed4f2a4fbb35d1d243ca07fac20dcb20b07f

commit fc7eed4f2a4fbb35d1d243ca07fac20dcb20b07f
Author: vmpstr <vmpstr@chromium.org>
Date: Thu Aug 11 19:16:48 2016

cc: Change visible rect in content space calculation to not overflow.

This patch changes the intersect call to use safe intersect math since
the rect intersect version might overflow (although it is likely
faster)

R=enne, danakj
BUG= 635432 
CQ_INCLUDE_TRYBOTS=master.tryserver.blink:linux_precise_blink_rel

Review-Url: https://codereview.chromium.org/2234183002
Cr-Commit-Position: refs/heads/master@{#411396}

[modify] https://crrev.com/fc7eed4f2a4fbb35d1d243ca07fac20dcb20b07f/cc/layers/picture_layer_impl.cc

This one should be fixed. 

vmpstr@: Once the fix is baked in canary, Shall we get this merged to M-53 as well. CF shows this impacting M-52 and M-53.

Thank you!

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot