The following revision refers to this bug:
  https://pdfium.googlesource.com/pdfium/+/cca452eab645fd6b0e63ab2fd1dd553277df111e

commit cca452eab645fd6b0e63ab2fd1dd553277df111e
Author: Lei Zhang <thestig@chromium.org>
Date: Mon Apr 23 16:29:47 2018

Add more image size checks in CJBig2_Context.

BUG= chromium:834557 

Change-Id: I8fb8d74f87097b39608c3f83f2fa1c4e49e69980
Reviewed-on: https://pdfium-review.googlesource.com/31170
Commit-Queue: Ryan Harrison <rharrison@chromium.org>
Reviewed-by: Ryan Harrison <rharrison@chromium.org>

[modify] https://crrev.com/cca452eab645fd6b0e63ab2fd1dd553277df111e/core/fxcodec/jbig2/JBig2_Context.cpp

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/e34993082fdbe8a42442592b77d3e29345bff1ad

commit e34993082fdbe8a42442592b77d3e29345bff1ad
Author: pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Date: Tue Apr 24 00:07:16 2018

Roll src/third_party/pdfium/ dd2a629f9..4e4147ecc (13 commits)

https://pdfium.googlesource.com/pdfium.git/+log/dd2a629f9ede..4e4147eccd25

$ git log dd2a629f9..4e4147ecc --date=short --no-merges --format='%ad %ae %s'
2018-04-23 dsinclair Make CFX_SeekableStreamProxy a subclass of IFX_SeekableReadStream
2018-04-23 dsinclair Change CFX_XML Save to take a write stream
2018-04-23 thestig Validate the Size dictionary entry in CPDF_SampledFunc.
2018-04-23 dsinclair Revert "Change CFX_XML Save to take a write stream"
2018-04-23 dsinclair Revert "Make CFX_SeekableStreamProxy a subclass of IFX_SeekableReadStream"
2018-04-23 dsinclair Make CFX_SeekableStreamProxy a subclass of IFX_SeekableReadStream
2018-04-23 dsinclair Change CFX_XML Save to take a write stream
2018-04-23 hnakashima Create FPDFPageObjMark_GetParamStringValue().
2018-04-23 tsepez Disable JavaScript entirely if no JSPlatform passed by embedder.
2018-04-23 tsepez Provide double-byte terminator in Windows font variant name.
2018-04-23 hnakashima Create API to get PageObject mark parameters.
2018-04-23 thestig Fix some nits in CPDF_SampledFunc().
2018-04-23 thestig Add more image size checks in CJBig2_Context.

Created with:
  roll-dep src/third_party/pdfium
BUG= chromium:835184 , chromium:834557 


The AutoRoll server is located here: https://pdfium-roll.skia.org

Documentation for the AutoRoller is here:
https://skia.googlesource.com/buildbot/+/master/autoroll/README.md

If the roll is causing failures, please contact the current sheriff, who should
be CC'd on the roll, and stop the roller if necessary.


TBR=dsinclair@chromium.org

Change-Id: Ib1c912e3943955d045f467a5885127d02d6ecac5
Reviewed-on: https://chromium-review.googlesource.com/1024884
Commit-Queue: pdfium-chromium-autoroll <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Reviewed-by: pdfium-chromium-autoroll <pdfium-chromium-autoroll@skia-buildbots.google.com.iam.gserviceaccount.com>
Cr-Commit-Position: refs/heads/master@{#552914}
[modify] https://crrev.com/e34993082fdbe8a42442592b77d3e29345bff1ad/DEPS

ClusterFuzz has detected this issue as fixed in range 552909:552920.

Detailed report: https://clusterfuzz.com/testcase?key=6545309438836736

Fuzzer: libFuzzer_pdf_codec_jbig2_fuzzer
Job Type: libfuzzer_chrome_asan
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2048 MB)
Crash Address: 
Crash State:
  pdf_codec_jbig2_fuzzer
  
Sanitizer: address (ASAN)

Regressed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=460158:460200
Fixed: https://clusterfuzz.com/revisions?job=libfuzzer_chrome_asan&range=552909:552920

Reproducer Testcase: https://clusterfuzz.com/download?testcase_id=6545309438836736

See https://chromium.googlesource.com/chromium/src/+/master/testing/libfuzzer/reference.md for more information.

If you suspect that the result above is incorrect, try re-doing that job on the test case report page.

ClusterFuzz testcase 6545309438836736 is verified as fixed, so closing issue as verified.

If this is incorrect, please add ClusterFuzz-Wrong label and re-open the issue.