Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/v8/v8/+/fb0144f6f91ba7028819d6c2d3c00eb508254693 ([turbofan] Move Math.* builtins to JSCallReducer).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

 Issue 814433  has been merged into this issue.

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/50a6e301a25f670cda64fd6c6ae5fb5068e4f912

commit 50a6e301a25f670cda64fd6c6ae5fb5068e4f912
Author: Sigurd Schneider <sigurds@chromium.org>
Date: Thu Feb 22 11:35:20 2018

[turbofan] Don't insert {Int32Constant}s in JSCallReducer

Bug:  chromium:814336 ,  v8:7250 , v8:7340
Change-Id: I9345778cabf24f1278ca7364ef7e223038c5aeee
Reviewed-on: https://chromium-review.googlesource.com/929121
Commit-Queue: Sigurd Schneider <sigurds@chromium.org>
Reviewed-by: Benedikt Meurer <bmeurer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#51468}
[modify] https://crrev.com/50a6e301a25f670cda64fd6c6ae5fb5068e4f912/src/compiler/js-call-reducer.cc
[modify] https://crrev.com/50a6e301a25f670cda64fd6c6ae5fb5068e4f912/test/unittests/compiler/js-call-reducer-unittest.cc

ClusterFuzz has detected this issue as fixed in range 51467:51468.

Detailed report: https://clusterfuzz.com/testcase?key=4673741955792896

Fuzzer: ochang_js_fuzzer
Job Type: linux_ubsan_vptr_d8
Platform Id: linux

Crash Type: Ill
Crash Address: 0x7f3ce7fd9fae
Crash State:
  v8::internal::compiler::Typer::Visitor::Reduce
  v8::internal::compiler::GraphReducer::Reduce
  v8::internal::compiler::GraphReducer::ReduceTop
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_d8&range=51425:51426
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_d8&range=51467:51468

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4673741955792896

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6747186675843072 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.