Author: Dan Sinclair
Project: chromium-pdfium
Changelist: https://pdfium.googlesource.com/pdfium.git/+/1770c021cf998ff1b33855b1397f6ea8ff9f7cd7
Time: Mon Mar 14 14:14:16 2016 -0400
The CL last changed line 117 of file xfa_script_imp.cpp, which is stack frame 3.

@Dan Sinclair: Assigning to you, request you to please take a look into it. Please help us top reassign if not with respect to your change.

Thanks.!

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6477937725669376

Fuzzer: ifratric_acrojs
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  CXFA_ScriptContext::GlobalPropertySetter
  FXJSE_V8_GenericNamedPropertySetterCallback
  v8::internal::PropertyCallbackArguments::Call
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=393862:393893

Minimized Testcase (2583.86 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95WFj0EQLVgm_p_BbTXqdzCcTnDNjwLd_tucQR6y4xi1GFUECkJIa_SThpUBRK5p2vVm41R_mKT7croD_9NwMntpzazpUVbrYLWxvZFK7qOWNglIe-EcEPJ51wdl91XBYDUWWmLbA3lxatR6bHbYb2ERcJi9xK8kGPvhIxVxivgFB9iPHg

Filer: ajha

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

I believe this is the same as 614211 in that the data we get back from the isolate is messed up for some reason.

ClusterFuzz has detected this issue as fixed in range 397239:397396.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6477937725669376

Fuzzer: ifratric_acrojs
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  CXFA_ScriptContext::GlobalPropertySetter
  FXJSE_V8_GenericNamedPropertySetterCallback
  v8::internal::PropertyCallbackArguments::Call
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=393862:393893
Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=397239:397396

Minimized Testcase (2583.86 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95WFj0EQLVgm_p_BbTXqdzCcTnDNjwLd_tucQR6y4xi1GFUECkJIa_SThpUBRK5p2vVm41R_mKT7croD_9NwMntpzazpUVbrYLWxvZFK7qOWNglIe-EcEPJ51wdl91XBYDUWWmLbA3lxatR6bHbYb2ERcJi9xK8kGPvhIxVxivgFB9iPHg

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz has detected this issue as fixed in range 397239:397396.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6128552453341184

Fuzzer: ifratric_acrojs
Job Type: mac_asan_chrome
Platform Id: mac

Crash Type: UNKNOWN READ
Crash Address: 0x000000000000
Crash State:
  CXFA_ScriptContext::GlobalPropertySetter
  FXJSE_V8_GenericNamedPropertySetterCallback
  v8::internal::PropertyCallbackArguments::Call
  
Regressed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=393862:393893
Fixed: https://cluster-fuzz.appspot.com/revisions?job=mac_asan_chrome&range=397239:397396

Minimized Testcase (2234.37 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95NAoOt9PKvsqaIKebGkFiXQH2qWEGpv2TaV51fad66-XLptFyhl1AsWledkub7SO-4V3lCGxxUi3Cfl0rUpnmJJIxrVYqSYYg-TD1SuPmYKFduaBQXye-Yasihot6RRAY51yp4pbWvPp7K7t4cEOclx67ECzeOPL06srBmoip8Mqbd3Os

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

Removing EditIssue view restrictions from ClusterFuzz filed bugs. If you believe that this issue should still be restricted, please reapply the label.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot