Interesting, gonna take a look!

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/d380c7da6df1fdd995688afd2c86a573852ecd73

commit d380c7da6df1fdd995688afd2c86a573852ecd73
Author: Michael Starzinger <mstarzinger@chromium.org>
Date: Fri May 05 11:39:06 2017

[asm.js] Fix validation failure in module variable import.

R=clemensh@chromium.org
TEST=message/asm-import-wrong-object
BUG= chromium:718653 

Change-Id: Ib903d7041ffb6a67c1b3c7be3e0f9455229acd90
Reviewed-on: https://chromium-review.googlesource.com/497747
Reviewed-by: Clemens Hammacher <clemensh@chromium.org>
Commit-Queue: Michael Starzinger <mstarzinger@chromium.org>
Cr-Commit-Position: refs/heads/master@{#45129}
[modify] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/src/asmjs/asm-parser.cc
[modify] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/src/asmjs/asm-parser.h
[add] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/test/message/asm-import-wrong-annotation.js
[add] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/test/message/asm-import-wrong-annotation.out
[add] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/test/message/asm-import-wrong-object.js
[add] https://crrev.com/d380c7da6df1fdd995688afd2c86a573852ecd73/test/message/asm-import-wrong-object.out

ClusterFuzz has detected this issue as fixed in range 45128:45129.

Detailed report: https://clusterfuzz.com/testcase?key=4689649695195136

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_arm_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !failed_ in asm-parser.cc
  
Sanitizer: address (ASAN)

Regressed: V8: 45077:45078
Fixed: V8: 45128:45129

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4689649695195136


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.