Predator has provided 2 possible suspects.

Suspect CL : https://pdfium.googlesource.com/pdfium/+/3e3a78b68c31a5e7b27ef9ebd35f287603abe7fa

Note: Author name is not available in the owners list, hence assigning it to the reviewer and cc'ing the owner.

dsinclair@ -- Could you please look into the issue, kindly re-assign to concern dev person

Thank You.

 Issue 771869  has been merged into this issue.

 Issue 771897  has been merged into this issue.

The following revision refers to this bug:
  https://pdfium.googlesource.com/pdfium/+/38d0449a02f4d16dd513c08c558e57891ec252dd

commit 38d0449a02f4d16dd513c08c558e57891ec252dd
Author: Artem Strygin <art-snake@yandex-team.ru>
Date: Thu Oct 05 14:09:45 2017

Fix Null-dereference READ in CPDF_Dictionary::GetIntegerFor.

Bug:  chromium:771858 
Change-Id: Ief40de384921f943a40e8154b67d83ae6e7ed915
Reviewed-on: https://pdfium-review.googlesource.com/15490
Reviewed-by: dsinclair <dsinclair@chromium.org>
Commit-Queue: Art Snake <art-snake@yandex-team.ru>

[modify] https://crrev.com/38d0449a02f4d16dd513c08c558e57891ec252dd/core/fpdfapi/parser/cpdf_data_avail.cpp

ClusterFuzz has detected this issue as fixed in range 506699:506834.

Detailed report: https://clusterfuzz.com/testcase?key=6034793342173184

Fuzzer: ochang_neurofuzz_borgfuzz
Job Type: windows_asan_chrome
Platform Id: windows

Crash Type: Null-dereference READ
Crash Address: 0x00000010
Crash State:
  CPDF_Dictionary::GetIntegerFor
  CPDF_DataAvail::CheckLinearizedData
  CPDF_DataAvail::IsFormAvail
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=506407:506494
Fixed: https://clusterfuzz.com/revisions?job=windows_asan_chrome&range=506699:506834

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6034793342173184

See https://github.com/google/clusterfuzz-tools for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 5050077935828992 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.