Detailed report: https://clusterfuzz.com/testcase?key=4803755498012672

Fuzzer: attekett_dom_fuzzer
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000128
Crash State:
  blink::ShapeResult::CreateForTabulationCharacters
  blink::CachingWordShapeIterator::NextForAllowTabs
  blink::CachingWordShapeIterator::Next
  
Sanitizer: thread (TSAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4803755498012672

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.