Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/chromium/src/+/1bd71a0de0bcac6b584da342a7beaa71938eaba5 (Document Modulator::GetReferrerPolicy).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

yutak: Would you take a look? My CL is just adding comment

Seems like somehow DetachLayoutTree() is getting into an infinite loop.

It's very unlikely that this happens in real environment, so P3.

ClusterFuzz has detected this issue as fixed in range 562390:562391.

Detailed report: https://clusterfuzz.com/testcase?key=6153232884432896

Fuzzer: inferno_layout_test_unmodified
Job Type: linux_lsan_chrome_mp
Platform Id: linux

Crash Type: Stack-overflow
Crash Address: 0x7fff67637e78
Crash State:
  VectorBufferBase
  VectorBuffer
  Vector
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=562162:562163
Fixed: https://clusterfuzz.com/revisions?job=linux_lsan_chrome_mp&range=562390:562391

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6153232884432896

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6153232884432896 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.