My speculation is that Cary's change (https://skia.googlesource.com/skia/+/c8323aa51ab27259076532ba081d2ed5c26aedfc) in the Skia roll just caused more paths to be marked as concave, causing the concave path tessellator to be called more often. So the bug is likely mine.

For more information, please see https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md.

The link referenced in the description is no longer valid.

ClusterFuzz has detected this issue as fixed in range 518505:518524.

Detailed report: https://clusterfuzz.com/testcase?key=4959058921783296

Fuzzer: libFuzzer_paint_op_buffer_fuzzer
Job Type: libfuzzer_chrome_asan_debug
Platform Id: linux

Crash Type: Stack-overflow
Crash Address: 0x7ffd5f33ce28
Crash State:
  set_bottom
  merge_edges_above
  merge_collinear_edges
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=497441:497480
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan_debug&range=518505:518524

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4959058921783296

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4959058921783296 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.