)]}'
{
  "commit": "36b2059cae7fc851c9f35babd35ec82a7a5d9694",
  "tree": "244a0e4b80ae31c9459cd73d80bd71b1166bb35e",
  "parents": [
    "315f94a0961792ec08428c94105caf3d8637acd1"
  ],
  "author": {
    "name": "Henrique Nakashima",
    "email": "hnakashima@chromium.org",
    "time": "Tue Jul 24 20:25:45 2018 +0000"
  },
  "committer": {
    "name": "Chromium commit bot",
    "email": "commit-bot@chromium.org",
    "time": "Tue Jul 24 20:25:45 2018 +0000"
  },
  "message": "Fix UAF in CPDFSDK_Widget::GetMixXFAWidget().\n\nDo not allow instanceManager methods to run in Foreground XFA forms.\nThey are static, and their widgets should not be inserted or removed.\n\nSee \"XML Forms Architecture (XFA) Specification Version 3.3\", page 272.\n\nBug: chromium:860697\nChange-Id: Ia96834e085ee508618ca4dcb2bd5271466369ede\nReviewed-on: https://pdfium-review.googlesource.com/38751\nReviewed-by: Tom Sepez \u003ctsepez@chromium.org\u003e\nCommit-Queue: Henrique Nakashima \u003chnakashima@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "f44ccba5882d06dc8d39094a94a84239e82198b4",
      "old_mode": 33188,
      "old_path": "fxjs/xfa/cjx_instancemanager.cpp",
      "new_id": "0882a182b2d4b39bb91b96161355db3b6daaf9a9",
      "new_mode": 33188,
      "new_path": "fxjs/xfa/cjx_instancemanager.cpp"
    },
    {
      "type": "modify",
      "old_id": "5ed1d7f3ec6d8499b0b9f637460537b8c012bd02",
      "old_mode": 33188,
      "old_path": "xfa/fxfa/parser/cxfa_document.cpp",
      "new_id": "5a85482b17a7de04119f3368a336f7b3ddeb50c7",
      "new_mode": 33188,
      "new_path": "xfa/fxfa/parser/cxfa_document.cpp"
    },
    {
      "type": "modify",
      "old_id": "795da004cc3975e8e8915a2fbef4ffc3f616e555",
      "old_mode": 33188,
      "old_path": "xfa/fxfa/parser/cxfa_document.h",
      "new_id": "8bddcb20359b19e74ec71d48577fea7d175181ce",
      "new_mode": 33188,
      "new_path": "xfa/fxfa/parser/cxfa_document.h"
    }
  ]
}