This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

CHECK failure in BytecodeArrayBuilder::SuspendGenerator, suspecting f0645612c42d170b449ae65205fdcbf2c48ae57b.

 Issue 729211  has been merged into this issue.

Detailed report: https://clusterfuzz.com/testcase?key=6309918272651264

Fuzzer: inferno_js_fuzzer_c
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  (materialized) != nullptr in bytecode-register-optimizer.cc
  
Sanitizer: address (ASAN)

Regressed: V8: 45673:45675

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6309918272651264


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

ClusterFuzz has detected this issue as fixed in range 45769:45770.

Detailed report: https://clusterfuzz.com/testcase?key=6309918272651264

Fuzzer: inferno_js_fuzzer_c
Job Type: linux_asan_d8_v8_arm64_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  (materialized) != nullptr in bytecode-register-optimizer.cc
  
Sanitizer: address (ASAN)

Regressed: V8: 45673:45675
Fixed: V8: 45769:45770

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6309918272651264


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 45769:45770.

Detailed report: https://clusterfuzz.com/testcase?key=5757579639914496

Fuzzer: inferno_js_fuzzer_c
Job Type: linux_asan_d8_dbg
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  (materialized) != nullptr in bytecode-register-optimizer.cc
  Materialize
  v8::internal::interpreter::BytecodeRegisterOptimizer::GetInputRegisterList
  
Sanitizer: address (ASAN)

Regressed: V8: 45673:45675
Fixed: V8: 45769:45770

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5757579639914496


See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5757579639914496 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug requires manual review: M61 has already been promoted to the beta branch, so this requires manual review
Please contact the milestone owner if you have questions.
Owners: amineer@(Android), cmasso@(iOS), ketakid@(ChromeOS), govind@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

+ awhalley@ (Security TPM) for M61 merge review.

Fix range is in 61, no need for merge.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot