Automatically applying components based on crash stacktrace and information from OWNERS files.

If this is incorrect, please apply the Test-Predator-Wrong-Components label.

Automatically assigning owner based on suspected regression changelist https://chromium.googlesource.com/v8/v8/+/0c296cb229c36b4cbfe80ce5e56089c1e8b378e7 ([turbofan] Initial support to compute NumberAdd/NumberSubtract in Word64.).

If this is incorrect, please let us know why and apply the Test-Predator-Wrong-CLs label. If you aren't the correct owner for this issue, please unassign yourself as soon as possible so it can be re-triaged.

The following revision refers to this bug:
  https://chromium.googlesource.com/v8/v8.git/+/1210d0c1df4533288eb6c8f793de5fbfbf1b8160

commit 1210d0c1df4533288eb6c8f793de5fbfbf1b8160
Author: Benedikt Meurer <bmeurer@chromium.org>
Date: Tue Sep 18 08:51:27 2018

[turbofan] Add missing Word8/16 -> Word64 representation changes.

Word8 and Word16 representation is treated like Word32 for the sake of
TurboFan's representation selection, but this was missing from the
Word64 conversions.

Bug:  chromium:884933 , v8:4153, v8:7881, v8:8171, v8:8178
Change-Id: If7b69cdd02b12546d87bba0643e9ee9cb35cb299
Reviewed-on: https://chromium-review.googlesource.com/1229953
Reviewed-by: Georg Neis <neis@chromium.org>
Commit-Queue: Benedikt Meurer <bmeurer@chromium.org>
Cr-Commit-Position: refs/heads/master@{#55983}
[modify] https://crrev.com/1210d0c1df4533288eb6c8f793de5fbfbf1b8160/src/compiler/representation-change.cc
[modify] https://crrev.com/1210d0c1df4533288eb6c8f793de5fbfbf1b8160/test/cctest/compiler/test-representation-change.cc
[add] https://crrev.com/1210d0c1df4533288eb6c8f793de5fbfbf1b8160/test/mjsunit/regress/regress-crbug-884933.js

ClusterFuzz has detected this issue as fixed in range 592020:592021.

Detailed report: https://clusterfuzz.com/testcase?key=5694408941633536

Fuzzer: inferno_webbot
Job Type: linux_ubsan_vptr_chrome
Platform Id: linux

Crash Type: Ill
Crash Address: 0x562111e885be
Crash State:
  v8::internal::compiler::RepresentationChanger::TypeError
  v8::internal::compiler::RepresentationChanger::GetWord64RepresentationFor
  v8::internal::compiler::RepresentationSelector::ConvertInput
  
Sanitizer: undefined (UBSAN)

Regressed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_chrome&range=591719:591720
Fixed: https://clusterfuzz.com/revisions?job=linux_ubsan_vptr_chrome&range=592020:592021

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5694408941633536

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5694408941633536 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Issue 885131 has been merged into this issue.