This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

M53 beta launch is next week.Your bug is labelled as Beta ReleaseBlock, pls make sure to land the fix before 6:00 PM PST, Friday (07/22/16). Thank you.

The fix for this has landed in PDFium (https://codereview.chromium.org/2160023002/) and should get pulled in with the next roll.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/73572619aa19e22c7b3b8c25f0ca27fd91b70006

commit 73572619aa19e22c7b3b8c25f0ca27fd91b70006
Author: thestig <thestig@chromium.org>
Date: Tue Jul 19 20:24:30 2016

Roll PDFium fdb35ff..eea31b7

https://pdfium.googlesource.com/pdfium.git/+log/fdb35ff..eea31b7

BUG= 628995 
TBR=dsinclair@chromium.org

Review-Url: https://codereview.chromium.org/2162883003
Cr-Commit-Position: refs/heads/master@{#406369}

[modify] https://crrev.com/73572619aa19e22c7b3b8c25f0ca27fd91b70006/DEPS

ClusterFuzz has detected this issue as fixed in range 406354:406399.

Detailed report: https://cluster-fuzz.appspot.com/testcase?key=6127572987674624

Fuzzer: ifratric_acrojs
Job Type: linux_msan_pdfium
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address: 
Crash State:
  CPWL_List_Notify::IOnInvalidateRect
  CFX_ListCtrl::Empty
  CFX_ListCtrl::~CFX_ListCtrl
  
Recommended Security Severity: Medium

Regressed: https://cluster-fuzz.appspot.com/revisions?job=linux_msan_pdfium&range=405185:405467
Fixed: https://cluster-fuzz.appspot.com/revisions?job=linux_msan_pdfium&range=406354:406399

Minimized Testcase (1868.29 Kb): https://cluster-fuzz.appspot.com/download/AMIfv95-efyQ7UiRm-oQOZomx_BbiDpkrH0zzqFWPgSstZSmuQGvlFzFukXwJMOi4EYZRRZozUK1CVUPQdkr7025vEwpe3QKDbT1pxTLrL8jQz_G3cHh8VSNIzWQcmd4xHDJEVPztEQjn2b2ieD07pTx-d860LjLGxe7jPfYWHzYTa7vsyTSOys?testcase_id=6127572987674624

See https://dev.chromium.org/Home/chromium-security/bugs/reproducing-clusterfuzz-bugs for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot