Providing Findit results for internal purpose,
Suspected CLs	Findit could not determine the memory tool from the stacktrace. Is it in a new format?

Unable to find the culprit, seeing some changes to 'CaretBase.cpp' in
https://chromium.googlesource.com/chromium/src/+/66f8f14f5560949660ad6efc0b00484d8342a15e

assigning to yoichio@, Could you please check the above issue & help us in finding an owner.

ClusterFuzz has detected this issue as fixed in range 410916:411126.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5677811358760960

Fuzzer: bj_broddelwerk
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  layoutObject == node->layoutObject()tree should not changed in CaretBase.cpp
  blink::CaretBase::caretLayoutObject
  blink::CaretBase::invalidateLocalCaretRect
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=410296:410309
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=410916:411126

Minimized Testcase (3.28 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94j5geLMhSGbH-TpoLe2tfQFEXA66QbbSHLl3HInaqreqzAgCZva4c5kQloKVT12c2Ko364kYqMIgk_ikBmvhPj4TI5rWDAuVykrVBubhOnpw70-KtGnTI8WL_arPVqtCjygS2Ry3sr0PaK7MFWzstEJWrBHw?testcase_id=5677811358760960

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot