As per the  Issue 789526 , assigning this issue to @palmer.
@palmer-- Could you please look into this issue, kindly reassign if it has nothing to do with your changes.

CC'ing mlippautz@/ ajwong@ for the recent changes made to the file PartitionAllocator.h

Thanks.

Just added empty interfaces, so I would rule out my additions.

This is working as intended: We won't allocate more objects than will fit. :)

ClusterFuzz testcase 6369956257333248 is still reproducing on tip-of-tree build (trunk).

If this testcase was not reproducible locally or unworkable, ignore this notification and we will file another bug soon with hopefully a better and workable testcase.

Otherwise, if this is not intended to be fixed (e.g. this is an intentional crash), please add ClusterFuzz-Ignore label to prevent future bug filing with similar crash stacktrace.

WAI

ClusterFuzz has detected this issue as fixed in range 530630:530642.

Detailed report: https://clusterfuzz.com/testcase?key=6369956257333248

Fuzzer: inferno_layout_test_fuzzer
Job Type: windows_asan_content_shell
Platform Id: windows

Crash Type: CHECK failure
Crash Address: 
Crash State:
  count <= MaxElementCountInBackingStore<T>() in PartitionAllocator.h
  blink::SourceBuffer::AppendBufferInternal
  blink::SourceBuffer::appendBuffer
  
Sanitizer: address (ASAN)

Fixed: https://clusterfuzz.com/revisions?job=windows_asan_content_shell&range=530630:530642

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6369956257333248

Additional requirements: Requires HTTP

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.