Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/eebeab8487b2fb74cf048e5e24cf5678856cf44e (Scroll documentElement using LayoutView natively).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

 Issue 836709  has been merged into this issue.

 Issue 836713  has been merged into this issue.

 Issue 836686  has been merged into this issue.

Issue 837188 has been merged into this issue.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/244cafbc1ec65b1b6a43e28526df47d6c6316e3e

commit 244cafbc1ec65b1b6a43e28526df47d6c6316e3e
Author: David Bokan <bokan@chromium.org>
Date: Thu Apr 26 18:28:52 2018

Fix nullptr crash in keyboard scrolling

This CL fixes the crash by ensuring that any nodes added to the scroll
chain are valid, meaning they have a LayoutBox and a ScrollableArea.

Bug:  836665 
Change-Id: Ifc45a02c618f558d55b3e08ca98a8386987371eb
Reviewed-on: https://chromium-review.googlesource.com/1027906
Reviewed-by: Steve Kobes <skobes@chromium.org>
Commit-Queue: David Bokan <bokan@chromium.org>
Cr-Commit-Position: refs/heads/master@{#554089}
[modify] https://crrev.com/244cafbc1ec65b1b6a43e28526df47d6c6316e3e/third_party/WebKit/LayoutTests/fast/scroll-behavior/scroll-customization/touch-scroll-customization.html
[add] https://crrev.com/244cafbc1ec65b1b6a43e28526df47d6c6316e3e/third_party/WebKit/LayoutTests/fast/scrolling/keyboard-scroll-before-layout.html
[modify] https://crrev.com/244cafbc1ec65b1b6a43e28526df47d6c6316e3e/third_party/blink/renderer/core/input/scroll_manager.cc

ClusterFuzz testcase 5183885093371904 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

ClusterFuzz has detected this issue as fixed in range 554088:554097.

Detailed report: https://clusterfuzz.com/testcase?key=5805499468218368

Fuzzer: ochang_domfuzzer
Job Type: linux_asan_content_shell_drt
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000018
Crash State:
  blink::ScrollManager::LogicalScroll
  blink::KeyboardEventManager::DefaultKeyboardEventHandler
  blink::Node::DefaultEventHandler
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=553301:553306
Fixed: https://clusterfuzz.com/revisions?job=linux_asan_content_shell_drt&range=554088:554097

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5805499468218368

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.