Maybe related to https://bugs.chromium.org/p/chromium/issues/detail?id=654173#c6 ? That bug also notes that the affected codepath isn't enabled.

seems there's a lot of similar bugs in this code. npm@ can you take a look and see if this one might already be fixed?

This issue is a security regression. If you are not able to fix this quickly, please revert the change that introduced it.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

ClusterFuzz has detected this issue as fixed in range 472363:472390.

Detailed report: https://clusterfuzz.com/testcase?key=6125466154172416

Fuzzer: libfuzzer_pdf_codec_gif_fuzzer
Job Type: mac_libfuzzer_chrome_asan
Platform Id: mac

Crash Type: Bus
Crash Address: 0x62a00002140c
Crash State:
  CGifLZWDecoder::AddCode
  CGifLZWDecoder::Decode
  gif_load_frame
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=423384:423408
Fixed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=472363:472390

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6125466154172416


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6125466154172416 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

This bug requires manual review: M60 has already been promoted to the beta branch, so this requires manual review
Please contact the milestone owner if you have questions.
Owners: amineer@(Android), cmasso@(iOS), josafat@(ChromeOS), bustamante@(Desktop)

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Bad bot, merge request not needed because gif is only used in XFA, which is not currently enabled in Chrome.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot