[mac bug triage]

Suspecting https://chromium.googlesource.com/chromium/src/+/05c2d71f2c3cab4c40c3d775b304d0bbfbd166bd from the regression range given by clusterfuzz - would either of you be able to look into this?

Thanks!

Same as  issue 714353 , I reckon clusterfuzz will report it as fixed once it has r468294 is in scope. (Last run missed it by 10 revs.)

ClusterFuzz has detected this issue as fixed in range 468288:468298.

Detailed report: https://clusterfuzz.com/testcase?key=5634180575920128

Fuzzer: inferno_layout_test_unmodified
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  blink::V8AbstractEventListener::BelongsToTheCurrentWorld
  blink::EventTarget::ClearAttributeEventListener
  blink::EventTarget::SetAttributeEventListener
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=431480:431542
Fixed: https://clusterfuzz.com/revisions?job=mac_asan_chrome&range=468288:468298

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5634180575920128


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.