It looks like the fix for 746769 introduced this bug (or they're pretty similar at least), any idea what's going on?

ClusterFuzz has detected this issue as fixed in range 492351:492492.

Detailed report: https://clusterfuzz.com/testcase?key=5471684076503040

Fuzzer: mbarbella_js_mutation_layout
Job Type: windows_syzyasan_content_shell
Platform Id: windows

Crash Type: Null-dereference
Crash Address: 0x00000003
Crash State:
  blink::CSSPropertyParser::ParseShorthand
  blink::CSSPropertyParser::ParseValueStart
  blink::CSSPropertyParser::ParseValue
  
Memory Tool: SYZYASAN

Regressed: https://clusterfuzz.com/revisions?job=windows_syzyasan_content_shell&range=492263:492268
Fixed: https://clusterfuzz.com/revisions?job=windows_syzyasan_content_shell&range=492351:492492

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5471684076503040


See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5471684076503040 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.