Detailed report: https://clusterfuzz.com/testcase?key=5709077376925696

Fuzzer: inferno_twister_c
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000128
Crash State:
  blink::ShapeResult::CreateForTabulationCharacters
  blink::CachingWordShapeIterator::NextForAllowTabs
  blink::CachingWordShapeIterator::Next
  
Sanitizer: thread (TSAN)

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5709077376925696

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.