Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/2a94373409feaf9794c2489ba9563fe67a8eabbd (Make <foreignObject> a stacking context.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/ee9e9d29aab83547734c5487ff452900015897cf

commit ee9e9d29aab83547734c5487ff452900015897cf
Author: Chris Harrelson <chrishtr@chromium.org>
Date: Fri Mar 23 18:39:07 2018

[SPv175] Apply local paint property and cull rect updates before checking for subsequence repainting.

Previously we were comparing incompatible cull rects.

Bug:  824738 
Cq-Include-Trybots: master.tryserver.blink:linux_trusty_blink_rel;master.tryserver.chromium.linux:linux_layout_tests_slimming_paint_v2
Change-Id: I12928f48ddb4316e538941e9429c91d86c1a842c
Reviewed-on: https://chromium-review.googlesource.com/976396
Commit-Queue: Chris Harrelson <chrishtr@chromium.org>
Reviewed-by: Xianzhu Wang <wangxianzhu@chromium.org>
Cr-Commit-Position: refs/heads/master@{#545529}
[add] https://crrev.com/ee9e9d29aab83547734c5487ff452900015897cf/third_party/WebKit/LayoutTests/flag-specific/enable-slimming-paint-v2/paint/invalidation/cull-rect-change-crash-expected.txt
[add] https://crrev.com/ee9e9d29aab83547734c5487ff452900015897cf/third_party/WebKit/LayoutTests/paint/invalidation/cull-rect-change-crash-expected.txt
[add] https://crrev.com/ee9e9d29aab83547734c5487ff452900015897cf/third_party/WebKit/LayoutTests/paint/invalidation/cull-rect-change-crash.html
[add] https://crrev.com/ee9e9d29aab83547734c5487ff452900015897cf/third_party/WebKit/LayoutTests/virtual/disable-spv175/paint/invalidation/cull-rect-change-crash-expected.txt
[modify] https://crrev.com/ee9e9d29aab83547734c5487ff452900015897cf/third_party/WebKit/Source/core/paint/PaintLayerPainter.cpp

ClusterFuzz has detected this issue as fixed in range 545528:545531.

Detailed report: https://clusterfuzz.com/testcase?key=5344102456229888

Fuzzer: mbarbella_js_mutation_layout
Job Type: linux_msan_content_shell_drt
Platform Id: linux

Crash Type: CHECK failure
Crash Address: 
Crash State:
  false in PaintController.cpp
  blink::PaintController::EndSubsequence
  blink::PaintLayerPainter::PaintLayerContents
  
Sanitizer: memory (MSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=544754:544758
Fixed: https://clusterfuzz.com/revisions?job=linux_msan_content_shell_drt&range=545528:545531

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5344102456229888

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5344102456229888 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.