This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Doesn't look like a security bug since this is an intentional crash, but still potentially a bug.

 Issue 746799  has been merged into this issue.

ClusterFuzz has detected this issue as fixed in range 488839:488849.

Detailed report: https://clusterfuzz.com/testcase?key=6650993503895552

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_asan_chrome_v8_arm
Platform Id: linux

Crash Type: Ill
Crash Address: 0xdbe983b6
Crash State:
  gfx::Size::GetArea
  cc::ResourcePool::TryAcquireResourceForPartialRaster
  cc::TileManager::CreateRasterTask
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_chrome_v8_arm&range=473741:473776
Fixed: https://clusterfuzz.com/revisions?job=linux_asan_chrome_v8_arm&range=488839:488849

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6650993503895552


See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6650993503895552 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

ClusterFuzz testcase 6117694419238912 is still reproducing on tip-of-tree build (trunk).

Please re-test your fix against this testcase and if the fix was incorrect or incomplete, please re-open the bug. Otherwise, ignore this notification and add ClusterFuzz-Wrong label.