GitLab

There's an integer overflow in ArrayDataTraits<bool> since the intermediate
calculation takes place with a uint32_t. Reducing kMaxNumElements slightly
prevents this overflow, and use of such large arrays would anyway have broken.

Also added a regression testcase into the fuzzer directory, and added in
support for the array<bool> type to the fuzzer.

Change-Id: Ieabe5a9abe7fa5ebd6a27cb810db63d47dc52473
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2003179Reviewed-by: Ken Rockot <rockot@google.com>
Reviewed-by: Chris Palmer <palmer@chromium.org>
Auto-Submit: Mark Brand <markbrand@google.com>
Commit-Queue: Mark Brand <markbrand@google.com>
Cr-Commit-Position: refs/heads/master@{#733986}