Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/v8/v8/+/e4402ed0bce568fbef7ee4bf8cd8ca47b62e4445 (Ensure ArrayBuffers are not neutered twice).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

This issue no longer repros for me. We have fixed several bugs in this area which probably caught this one as well.

ClusterFuzz has detected this issue as fixed in range 51970:51971.

Detailed report: https://clusterfuzz.com/testcase?key=5967750607142912

Fuzzer: ochang_js_fuzzer_win
Job Type: windows_asan_d8
Platform Id: windows

Crash Type: Fatal error
Crash Address: 
Crash State:
  
  v8::platform::PrintStackTrace
  v8::internal::JSArrayBuffer::Neuter
  v8::ArrayBuffer::Neuter
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=51889:51890
Fixed: https://clusterfuzz.com/revisions?job=windows_asan_d8&range=51970:51971

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5967750607142912

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5967750607142912 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.