This is XFA which is not enabled in Chromium.

ClusterFuzz has detected this issue as fixed in range 476905:485054.

Detailed report: https://clusterfuzz.com/testcase?key=4518732687998976

Fuzzer: libFuzzer_pdf_codec_bmp_fuzzer
Job Type: mac_libfuzzer_chrome_asan
Platform Id: mac

Crash Type: Heap-buffer-overflow READ 4
Crash Address: 0x603000004d4c
Crash State:
  CCodec_ProgressiveDecoder::ReSampleScanline
  CCodec_ProgressiveDecoder::BmpReadScanline
  bmp_decode_rle4
  
Sanitizer: address (ASAN)

Recommended Security Severity: Medium

Fixed: https://clusterfuzz.com/revisions?job=mac_libfuzzer_chrome_asan&range=476905:485054

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=4518732687998976


See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reproducing.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 4518732687998976 is verified as fixed, so closing issue.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.

Did https://pdfium.googlesource.com/pdfium/+/f6f68c75ce54a5865fb19dcb075e7734f1639663 or https://pdfium.googlesource.com/pdfium/+/b32a949d667600cb33e80e1bb8c97a23d96f27d9 fix this?

Probably none of those two. The clusterfuzz bisect could be wrong because this fuzzer was not building for a while, until 2bbf53e2e07f55cff1d21d899813e9ecb2123bb6, which is also in the range. However it does appear to be fixed.

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot