Author: mstensho
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/c2025efb0537e16c304c37b1df4d687ec698cd68
Time: Thu Oct 13 18:56:07 2016
Lines 1183-1190 of file LayoutTableSection.cpp which potentially caused crash are changed in this cl (frame #3, "blink::LayoutTableSection::layoutRows").

Lines 5506-5512 of file LayoutBox.cpp which potentially caused crash are changed in this cl (frame #2, "blink::LayoutBox::crossesPageBoundary").
Minimum distance from crash line to modified line: 0. (file: LayoutBox.cpp, crashed on: 5506, modified: 5506).

Suspected Project: chromium
Suspected Component: Blink>Layout

dgrogan@, please duplicate if is same as  issue 655911 .

Thank you.

ClusterFuzz has detected this issue as fixed in range 425380:425442.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6599767071391744

Fuzzer: marty_html_twiddler
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Floating-point-exception
Crash Address: 
Crash State:
  intMod
  blink::LayoutBox::pageRemainingLogicalHeightForOffset
  blink::LayoutBox::crossesPageBoundary
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=425052:425143
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_lsan_chrome_mp&range=425380:425442

Minimized Testcase (1.04 Kb): https://cluster-fuzz.appspot.com/download/AMIfv97DbRYpIudKcVt9xHCKM3T4FjvWwo8PgF2ltKwkJ2JSfvNxROXZuuc3-QyoCGVprIVfWFGmrWBkXD36TxFEp_xWUTuLUh10vHHZef4fPMbJbI1VI2g1F3LOKHpfsBMCbnZcV71JbykXV5VHXf-m9f40RhUQJw?testcase_id=6599767071391744

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot