Regression range and repro points towards the new asm-wasm-builder.

ClusterFuzz has detected this issue as fixed in range 38805:38806.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4712240190324736

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm_dbg
Platform Id: linux

Crash Type: Unreachable code
Crash Address: 
Crash State:
  asm-wasm-builder.cc
  
Regressed: V8: r37728:37729
Fixed: V8: r38805:38806

Minimized Testcase (0.34 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv97YpCFYENZZi9g42A6Cj04nrJiOOg5C-rsgl7ywYTHyhaFmkDhnbJgueLn7IKFfu2BuZQPhhv_HtIwS1drezZIsClRPr8Gf8tJn1IkrV2mEL5ORGwscoJroNB-nRzaUzA3zOpEuvDZaNG6WFhOBY2MVt9Co3w?testcase_id=4712240190324736
try {
result =
function() {
  }();
  ( {
  })();
} catch(e) {; }
result =
function() {
  }();
try {
result =
  ( {
  })();
  (function() {
})();
    ( {
    })();
} catch(e) {; }
function __f_6() {
  'use asm';
  function __f_7() {
    var __v_8 = 1, __v_6 = 0;
-__v_6;
  }
  return { __f_7: __f_7 };
}
  Wasm.instantiateModuleFromAsm(__f_6.toString());


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase is verified as fixed, closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot