Detailed report: https://clusterfuzz.com/testcase?key=5576844256215040

Fuzzer: libFuzzer_sfntly_fuzzer
Fuzz target binary: sfntly_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Null-dereference READ
Crash Address: 0x000000000000
Crash State:
  sfntly::EbdtTable::Builder::GenerateLocaList
  sfntly::SetupBitmapBuilders
  sfntly::SubsetterImpl::Subset
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=423381:423433

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=5576844256215040

Issue filed automatically.

See https://github.com/google/clusterfuzz-tools for more information.