Possible suspect through code search on file PartitionAlloc.h

https://chromium.googlesource.com/chromium/src/+/7757f92ee97b2668c3f412fa0ebdb62321d8bd0d

I suspect this is WontFix?

I suspect we just don't have enough memory for the requested canvas, and then we crash (which is expected)

ClusterFuzz has detected this issue as fixed in range 442831:443258.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4719992169037824

Fuzzer: cdiehl_dharma
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: Security CHECK failure
Crash Address: 
Crash State:
  result || flags & PartitionAllocReturnNull in PartitionAlloc.h
  blink::DOMTypedArray<>::createOrNull
  blink::ImageData::create
  
Sanitizer: address (ASAN)

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=435209:435314
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_asan_chrome_v8_arm&range=442831:443258

Minimized Testcase (0.24 Kb): https://cluster-fuzz.appspot.com/download/AMIfv96yV9hxfY02dhNzFGisc_IdQsQB-JbabbNaOcKehZPVxadT8kNoWMfPBr4LaxxRgxvbN_P8P-Mk0wEjT75X7JgWSnG8ZQdTTO2KUSefl1Eu4I0uwHC-JXyoZ783AuBkUDxpRjvaA0OKz5VDm63X2NTGIivjhw?testcase_id=4719992169037824

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.