https://crash.corp.google.com/browse?q=EXISTS+%28SELECT+1+FROM+UNNEST%28CrashedStackTrace.StackFrame%29+WHERE+FunctionName+LIKE+%27%25PaintTimingDetector%25%27%29+AND+expanded_custom_data.ChromeCrashProto.magic_signature_1.name%3D%27blink%3A%3ATextPaintTimingDetector%3A%3ARecordText%27&stbtiq=&reportid=b08bc3f2617b1a5d&index=1
All of these crashes are caused by integer-overflow. Should be due to the same reason.
Comment 1 by maxlg@chromium.org
, Nov 27Status: Duplicate (was: Assigned)