This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 430792:430869.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5332378546601984

Fuzzer: inferno_twister
Job Type: linux_asan_chrome_chromeos
Platform Id: linux

Crash Type: UNKNOWN READ
Crash Address: 0x7fa293201a90
Crash State:
  blink::Member<blink::IdTargetObserver> const* WTF::HashTable<blink::Member<blink
  blink::IdTargetObserverRegistry::removeObserver
  blink::SVGElementProxy::removeClient
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_chromeos&range=430525:430550
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_chromeos&range=430792:430869

Minimized Testcase (3.81 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96OTKf9SnzYemYURShV4uPDrPtA0CCN2s18K_JhqnTFMIp-48vW5G_YLg0YrMg8R3U6Fqw4dzIXyjZtWsH4HDRZgHY_yMiO-9kfuTUrmU7TlB9mTFlwONvsN9M53ItsWswipcn5NF6F2l0lMW9sYcRwfzwUqA?testcase_id=5332378546601984

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot