Assigning to the concern owner from Predator results --
The result is a list of CLs that change the crashed files. 

Author: fserb
Project: chromium
Changelist: https://chromium.googlesource.com/chromium/src/+/5aae822c218a67b706125e9620290026d523d629
Time: Mon Apr 03 16:50:23 2017
Lines 1599-1600 of file BaseRenderingContext2D.cpp which potentially caused crash are changed in this cl (frame #6, "blink::BaseRenderingContext2D::getImageData").
Minimum distance from crash line to modified line: 0. (file: BaseRenderingContext2D.cpp, crashed on: 1600, modified: 1600).

@fserb -- Could you please look into the issue, kindly re-assign if this is not related to your changes.
Thank You.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/27458c3a4574379467168add07d7e6d7bf40c95d

commit 27458c3a4574379467168add07d7e6d7bf40c95d
Author: fserb <fserb@chromium.org>
Date: Fri Apr 07 20:34:18 2017

Prevent integer overlow on getImageData

BUG= 708165 , 708044 , 708961 

Review-Url: https://codereview.chromium.org/2797333002
Cr-Commit-Position: refs/heads/master@{#462989}

[modify] https://crrev.com/27458c3a4574379467168add07d7e6d7bf40c95d/third_party/WebKit/Source/modules/canvas2d/BaseRenderingContext2D.cpp

ClusterFuzz has detected this issue as fixed in range 462974:462994.

Detailed report: https://clusterfuzz.com/testcase?key=5108426431791104

Fuzzer: inferno_twister
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Integer-overflow
Crash Address: 
Crash State:
  MakeXYWH
  SkReadPixelsRec::trim
  SkPixmap::readPixels
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=461444:461460
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=462974:462994

Reproducer Testcase: https://clusterfuzz.com/download/AMIfv973KO-2pq_MVLseq8g_fC38xSXOX-HSSGS31x0qFbsAlt-fbiWeavVoqvHU9J9hhEbEsQgwI-rmGgjcbxmcNgdmqJsh70-IMLD5zcDLSwlA__HCaTVOZRIBfY6vfcMnR8y2u0QiFRwUZqKrjI0htGPMwyif2XoYT85IqT1su-4zMbadH6x7Ri2GHA_2YVsgh66mdKt1A9fflLTA1MpH20T-pTtQ7eZrVBb2hhz0bR7bw4Mr3fiscB7WIYfxV3a-Uo46mla63A5yQPBb49vZptv_eEv14yu6zMWJsapTIsoH0UZsrsS8o-j0sOvq2ess-u5Xvn2_3enMVT9c-7UIBBjguy1aeWzu43LdJsc68Xs64WhcWBcbekk18Ka01hJqTddoF5HEbgp2sTn_gkvk4RLmk7c3pw?testcase_id=5108426431791104


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.