Applying security view restrictions to all v8 CHECK/DCHECK failures.

(CHECKs aren't security, but we have no way to distinguish these right now).

Detailed report: https://clusterfuzz.com/testcase?key=6417030613041152

Fuzzer: inferno_js_fuzzer
Job Type: linux_asan_d8_v8_mipsel_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (index >= 0 && index < this->length()
  
Sanitizer: address (ASAN)

Regressed: V8: 45425:45426

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6417030613041152


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

CF points to 233b6926e3ae29a4567b4c55bc1c1e96c07c1f92.

ClusterFuzz has detected this issue as fixed in range 45530:45531.

Detailed report: https://clusterfuzz.com/testcase?key=6417030613041152

Fuzzer: inferno_js_fuzzer
Job Type: linux_asan_d8_v8_mipsel_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (index >= 0 && index < this->length()
  
Sanitizer: address (ASAN)

Regressed: V8: 45425:45426
Fixed: V8: 45530:45531

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6417030613041152


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 45530:45531.

Detailed report: https://clusterfuzz.com/testcase?key=4804463599812608

Fuzzer: mbarbella_js_mutation
Job Type: linux_asan_d8_v8_mipsel_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  !v8::internal::FLAG_enable_slow_asserts || (index >= 0 && index < this->length()
  v8::internal::Deoptimizer::ComputeOutgoingArgumentSize
  v8::internal::Deoptimizer::ComputeInputFrameSize
  
Sanitizer: address (ASAN)

Regressed: V8: 45425:45426
Fixed: V8: 45530:45531

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4804463599812608


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Ah, it was already fixed in https://codereview.chromium.org/2901393003.

 Issue 724614  has been merged into this issue.

 Issue 726156  has been merged into this issue.

 Issue 724612  has been merged into this issue.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot