thestig@, I wonder if you can take a look at this bug. Thank you.

This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ochang: Are we punting these to Foxit? (And redo milestone, release-blocker, etc?)

I thought libtiff, being 28 years old, would have been picked clean of security bugs by now. :(

M53 beta launch is coming soon.Your bug is labelled as Beta ReleaseBlock, pls make sure to land the fix before 6:00 PM PST, Monday (07/18/16). Thank you.

Punting to Foxit. I'd rather not touch libtiff code...

ClusterFuzz has detected this issue as fixed in range 441806:441876.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=5765904562651136

Fuzzer: libfuzzer_pdf_codec_tiff_fuzzer
Job Type: libfuzzer_chrome_msan
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  TIFFReverseBits
  TIFFFillTile
  TIFFReadEncodedTile
  
Sanitizer: memory (MSAN)

Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=398314:399191
Fixed: https://cluster-fuzz.appspot.com/revisions?job=libfuzzer_chrome_msan&range=441806:441876

Minimized Testcase (0.35 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95qZxNAIo4QKnvVOt5het7rKTWf39bceRlQAW1JpzGfWLHi-__40sDjxVyxD6MhNnE_AW2EbZzmKb1FLCv2HBxXmCsFUvBWzd_hw6swyip76dOEC9y08FZF6I4EZjIRSRqEGggNdFIBwIYzkpS_8mJn4CmDVQ?testcase_id=5765904562651136

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5765904562651136 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

We need to confirm if this is fixed or not, sending to npm@ to verify.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot