ClusterFuzz has detected this issue as fixed in range 440242:440280.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6692488011317248

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Float-cast-overflow
Crash Address: 
Crash State:
  NULL
Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=435261:438085
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_ubsan_chrome&range=440242:440280

Minimized Testcase (0.47 Kb):
Download: https://cluster-fuzz.appspot.com/download/AMIfv945FenF3_7C1AR6DItiLW1JAhAELPwg1pYvdrqyNt76AqW83ZHeZQ8puyUBUW7wYJckvvrkWk9vmpZY3iPKaucmD-HRTnjK7zI16cYSKVvmXyqsdD67G9m96N6s2TMBGyVLZf4EFCTIa3RZLk6nVDxsIyYRoQ?testcase_id=6692488011317248
<script src=../../resources/webgl-test-utils.js></script>
<canvas id=canvas><script id=fshader>
uniform int uCount;
void main() {
    float a = -714.0;
    for (int i = 0; i < -512; ++i) {
        if (i < uCount) {
            a += 0.;
        }
    }
}
</script>
<script>
var wtu = WebGLTestUtils;
  var gl = wtu.create3DContext();
  var program = wtu.setupProgram(gl, [ "fshader"], ["aPosition"]);
</script><style>
.c12:nth-of-type(4294967142n3) { grid-template-rows: minmax(90px, 


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6692488011317248 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.