Not sure what to do with this one. The previous similar crash seems to be unintentionally fixed ( issue 845006 ). I wonder if this is the same thing.

Let's wait a bit, as it also requires a ton of gestures.

Probably the same as  issue 845006 .

Are we running the file picker on the wrong thread?

This does not looks to be relevant to my area. So removing my self form owner. 

ClusterFuzz has detected this issue as fixed in range 581185:581186.

Detailed report: https://clusterfuzz.com/testcase?key=4806113816739840

Fuzzer: tokenfuzz_pdf_march16
Job Type: linux_tsan_chrome_mp
Platform Id: linux

Crash Type: ASSERT
Crash Address: 0x7b100012aa00
Crash State:
  GTK_IS_TREE_MODEL (tree_model)
  
Sanitizer: thread (TSAN)

Fixed: https://clusterfuzz.com/revisions?job=linux_tsan_chrome_mp&range=581185:581186

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4806113816739840

Additional requirements: Requires Gestures

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4806113816739840 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug requires manual review: M69 has already been promoted to the beta branch, so this requires manual review
Please contact the milestone owner if you have questions.
Owners: amineer@(Android), kariahda@(iOS), cindyb@(ChromeOS), govind@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

+awhalley@ (Security TPM) for M69 merge review. Not seeing any cl here though. 

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot