)]}'
{
  "commit": "4ff7a4246c81a71b4f878e959b3ca304cd76ec8a",
  "tree": "2a8002655a6300e69408d08196bb86a6f1b0145f",
  "parents": [
    "8e1b60824d079546c8cc3f0e3d9fa0ea9fa980fa"
  ],
  "author": {
    "name": "Tom Sepez",
    "email": "tsepez@chromium.org",
    "time": "Tue Jun 02 10:09:49 2015 -0700"
  },
  "committer": {
    "name": "Tom Sepez",
    "email": "tsepez@chromium.org",
    "time": "Tue Jun 02 10:09:49 2015 -0700"
  },
  "message": "Fix heap use after free in Document::DoFieldDelay and Document::delay\n\nThis fix removes CJS_DelayData object from m_DelayData array and copies them to\na new array, before processing them. So contents of m_DelayData array cannot be\nused after they get freed.\n\nBUG\u003d487928\n\nR\u003dtsepez@chromium.org\n\nTEST\u003d Chrome pdf plugin should not crash when poc_stable,testuafdocument1.pdf\n      and testuafdocument2.pdf are viewed.\n      see crbug.com/487928 and crbug.com/487928#c18 for more details.\n\nReview URL: https://codereview.chromium.org/1163823002\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "b821f1eca3fa79a9ffd5bebd18604c746de52d78",
      "old_mode": 33188,
      "old_path": "fpdfsdk/src/javascript/Document.cpp",
      "new_id": "6a3d6e1e334d1ed7661db22015570cad014e7fe1",
      "new_mode": 33188,
      "new_path": "fpdfsdk/src/javascript/Document.cpp"
    }
  ]
}
