This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 454545:454552.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5514840170037248

Fuzzer: inferno_webbot
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000300000027
Crash State:
  v8::internal::compiler::JSNativeContextSpecialization::ReduceNamedAccess
  v8::internal::compiler::JSNativeContextSpecialization::ReduceNamedAccessFromNexu
  v8::internal::compiler::JSNativeContextSpecialization::ReduceJSLoadNamed
  
Sanitizer: address (ASAN)

Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=451144:451616
Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=454545:454552

Reproducer Testcase: https://cluster-fuzz.appspot.com/download/AMIfv95us5wARb9grvGWV7AZBKmTdgyZdQVFWZVmcilNWXJc9fVg3mWQS1kMqVcEQvzcH0XxXeMKZnO6YzBGsH_O9-CsSt40iS6fZNwK37i3IVGWARloUMnztGY8hLH2zuRGZwSs8eFsSy-9dTC1QiIHeLyUphbYA3aWEUEsq8Ujz5mx_9IFw1ew1KO1mBKmf53bNyFiTbofokHgEIDZQb8kQPnZE8rbprqRJDdxZYqYkOVALZ073aTzvI-adhDSspbl5ywFg5RbauwSAlOMM_-fZJ5bIPc9TghS1Q1qu6sO64Gd6Pmnz9JBZUftAvJe9AX64ZuJme5-D4orqBmHyF4bnx1rgCNRJ_xAHprXksdiQR9t4Hx12Zg?testcase_id=5514840170037248


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot