)]}'
{
  "commit": "1bd6c15c766419e0fc952909ea7ca5520093e74c",
  "tree": "38af9d715601d278000d86ed66ac19b3f814091f",
  "parents": [
    "0c1d8f51ea1a0bd063cf7db3d4a434d1cc2d6e96"
  ],
  "author": {
    "name": "Lei Zhang",
    "email": "thestig@chromium.org",
    "time": "Mon Jul 08 23:33:08 2019 +0000"
  },
  "committer": {
    "name": "Chromium commit bot",
    "email": "commit-bot@chromium.org",
    "time": "Mon Jul 08 23:33:08 2019 +0000"
  },
  "message": "Prevent a UAF in CPDFSDK_Widget::HasXFAAAction().\n\nCalling GetMixXFAWidget() and GetGroupMixXFAWidget() can trigger JS and\ninvalidate widgets returned by previous calls. Use ObservedPtr to check\nfor CXFA_FFWidget destruction to catch this. Apply the same fix to\nCPDFSDK_Widget::OnXFAAAction().\n\nBug: chromium:981528\nChange-Id: I4d6cdd05135ccd7f57d53e8d011422de01921191\nReviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/57353\nReviewed-by: Tom Sepez \u003ctsepez@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "5309c494b60c94e29dbe2ba6041f5c8a7e74b52c",
      "old_mode": 33188,
      "old_path": "fpdfsdk/cpdfsdk_widget.cpp",
      "new_id": "8a6f3c2e46b671c690922c0a8ad5ec58b839da45",
      "new_mode": 33188,
      "new_path": "fpdfsdk/cpdfsdk_widget.cpp"
    }
  ]
}