This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

dstockwell: could you please help triage this layout crash?

ClusterFuzz has detected this issue as fixed in range 451504:451508.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=4939479656955904

Fuzzer: bj_broddelwerk
Job Type: linux_msan_content_shell_drt
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  blink::LayoutBoxModelObject::hasSelfPaintingLayer
  blink::LayoutBlockFlow::addOverhangingFloats
  blink::LayoutBlockFlow::layoutBlockChild
  
Sanitizer: memory (MSAN)

Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_msan_content_shell_drt&range=449916:449921
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_msan_content_shell_drt&range=451504:451508

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv97BsUQNgZ-pV6xpHuFgcgWAnl-XLj7UsIVVjrsP00h-vIDCL9yahHXzoS5vwpMlRY8CfNBe4rH1HnsGYOF77nUS37Zim6_Nxv-nbXhYFn9HJZWveHF2jLemWf_2pd9MNbBObbML9Xe9qDTe0YFrpvW9Vl3UnHefdqjQkPxHDXZYpZJQpBf8iVH6u4EU7r6-JUwJTB88VeyEqAyddkq91BB7PpVMR_99h29BJHwG7dhwzugs9hcfZwyR6bx0EIGJTSyXg1Rxbzoi40YbiH3G-Q41PLNnB5JY1Kxsg4VU1FR4cPvJCT5l8NQ1tyNQvbVhFuUvVL14ehEXw3KJSWKGOxFw0AQz2T4ahLG220uBON6vBg73BFYhiXnBiKyc_f-0wdXIZE0stw0vh9WTZxZJflrs6dRaSQ?testcase_id=4939479656955904


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4939479656955904 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot