Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/2a94373409feaf9794c2489ba9563fe67a8eabbd (Make <foreignObject> a stacking context.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

 Issue 824617  has been merged into this issue.

 Issue 824642  has been merged into this issue.

The bug is that the code expects SVG foreign objects to have a mask if
CSS says so.

 Issue 824675  has been merged into this issue.

ClusterFuzz testcase 4561047105830912 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

ClusterFuzz has detected this issue as fixed in range 545310:545315.

Detailed report: https://clusterfuzz.com/testcase?key=4774635695243264

Fuzzer: ifratric-browserfuzzer-v3
Job Type: linux_ubsan_chrome
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000008
Crash State:
  blink::EffectPaintPropertyNode const& blink::LowestCommonAncestor<blink::EffectP
  SwitchToEffect
  Convert
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=544754:544759
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_chrome&range=545310:545315

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4774635695243264

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/6306706a33abf1a7a299a288ace7fb8f6a479081

commit 6306706a33abf1a7a299a288ace7fb8f6a479081
Author: Chris Harrelson <chrishtr@chromium.org>
Date: Fri Mar 23 00:45:20 2018

[foreignObject stacking] Allocate a mask property node for <foreignObject> when desired.

Bug:  824561 
Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2
Change-Id: I47968b836ce687f5d8a1497ca3d5bfcad8427ce3
Reviewed-on: https://chromium-review.googlesource.com/976647
Reviewed-by: Xianzhu Wang <wangxianzhu@chromium.org>
Commit-Queue: Chris Harrelson <chrishtr@chromium.org>
Cr-Commit-Position: refs/heads/master@{#545313}
[modify] https://crrev.com/6306706a33abf1a7a299a288ace7fb8f6a479081/third_party/WebKit/Source/core/paint/CSSMaskPainter.cpp
[modify] https://crrev.com/6306706a33abf1a7a299a288ace7fb8f6a479081/third_party/WebKit/Source/core/paint/PaintPropertyTreeBuilderTest.cpp