ClusterFuzz has detected this issue as fixed in range 438853:439175.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4530701887340544

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Float-cast-overflow
Crash Address: 
Crash State:
  blink::RealtimeAnalyser::setFftSize
  blink::AnalyserHandler::setFftSize
  fftSizeAttributeSetter
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=435261:438085
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=438853:439175

Minimized Testcase (0.23 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv96Twm-2oTLrrGGaAC5SsgPL0CG_EWRp6NWiA6Bb2867PxKmy4MQWvFOJZuChRTFKGXQ9rO_JqnT20AhzQ_6OrqI8DeFXpltVaZseLcOufXWJhAWHcHHs14a8a2uwh9TSCzyRP1p1R5rDMUwNr16ISDKIT5hHg?testcase_id=4530701887340544
 id=tCF0><script>
var Context0= new webkitAudioContext()
var Analyser1=Context0.createAnalyser();
setTimeout({
})

setTimeout(function(){
})
setTimeout({
})

setTimeout({
})
try{Analyser1.fftSize=0.4113040284719318;}catch(e){}

</script>



Additional requirements: Requires HTTP

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4530701887340544 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.