Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5583464255717376 Fuzzer: inferno_layout_test_unmodified Job Type: windows_syzyasan_content_shell Platform Id: windows Crash Type: UNKNOWN Crash Address: 0x0000001f Crash State: blink::WindowAnimationWorklet::WindowAnimationWorklet blink::WindowAudioWorklet::from blink::WindowAudioWorklet::audioWorklet Regressed: https://cluster-fuzz.appspot.com/revisions?job=windows_syzyasan_content_shell&range=440977:440981 Minimized Testcase (1.71 Kb): https://cluster-fuzz.appspot.com/download/AMIfv94qpUcoDmrChra7eD9tPhg3zNCkY2beQjoTt0gb2sboaF50xLneRWb9AhvtGI6dWWRQO3vz6jnJxdafYD8x2rFnMPubR0SvuWV0VTVB0MOP8cDcJMyUSOZ2rpmn6DpVOb2bHZ2pyBrtbk8tsR1v4pDjPmCNc4tE7YvqxdlyV9AuddRjvz-EO9q0ktTj_gaauVhZdiK6AKHEiiH8Em2Qdb_egM-X-MuXM3cEUOI-w9MltllwFMWGLvB6p5p8q0wz11LzKMR1plmxH8Yffqh5o1dPnJRKqXgyc43-FElZHjy8qzWkAK2B0mS9QNdAZW7YBIcZQcn_Uw1aO_2ZKsvcX7uNXEFn2glh-S16R_RiJAajdTJ8hEQ?testcase_id=5583464255717376 Issue filed automatically. See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.
The following revision refers to this bug: https://chromium.googlesource.com/chromium/src.git/+/09ccdd3b967bc2d7679da7a5de1dd2eec7a61a59 commit 09ccdd3b967bc2d7679da7a5de1dd2eec7a61a59 Author: haraken <haraken@chromium.org> Date: Tue Jan 03 07:52:13 2017 WindowAnimationWorklet: gracefully handle detached use BUG= 677605 Review-Url: https://codereview.chromium.org/2609003003 Cr-Commit-Position: refs/heads/master@{#441096} [modify] https://crrev.com/09ccdd3b967bc2d7679da7a5de1dd2eec7a61a59/third_party/WebKit/Source/modules/compositorworker/WindowAnimationWorklet.cpp
Comment 1 by sigbjo...@opera.com
, Jan 2 2017Status: Duplicate (was: Untriaged)