Crash CPDFXFA_App::GetLanguage() running pdfium_test against XFA-node-caption.pdf

[GoogleCodeExporter]

    #0 0x4c6109 in CFX_ArrayTemplate<CPDFSDK_Annot*>::GetAt(int) const /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdfium/fpdfsdk/src/../
include/../../core/include/fpdfdoc/../fxcrt/fx_basic.h:405:13
    #1 0x143c050 in CPDFXFA_App::GetLanguage(CFX_WideString&) /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdfium/fpdfsdk/src/fpdfxfa/fpdf
xfa_app.cpp:162:30
    #2 0x14bd2f6 in CXFA_Document::GetLocalMgr() /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdfium/xfa/src/fxfa/src/parser/xfa_document_
imp.cpp:254:9
    #3 0x1539576 in XFA_GetLocaleValue(CXFA_WidgetData*) /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdfium/xfa/src/fxfa/src/parser/xfa_u
tils_imp.cpp:180:66
    #4 0x14f87b8 in CXFA_WidgetData::GetPictureContent(CFX_WideString&, XFA_VALUEPICTURE) /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdf
ium/xfa/src/fxfa/src/parser/xfa_objectacc_imp.cpp:3260:36
    #5 0x14fedad in CXFA_Node::GetContainerWidgetData() /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pdfium/xfa/src/fxfa/src/parser/xfa_ob
ject_imp.cpp:442:17
    #6 0x15099d8 in CXFA_Node::Script_Field_DefaultValue(_FXJSE_HVALUE*, int, XFA_ATTRIBUTE) /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/
pdfium/xfa/src/fxfa/src/parser/xfa_object_imp.cpp:1880:49
    #7 0x150930e in CXFA_Node::Script_Som_DefaultValue(_FXJSE_HVALUE*, int, XFA_ATTRIBUTE) /usr/local/google/tsepez/b1/src/out_asan/Release/../../third_party/pd
fium/xfa/src/fxfa/src/parser/xfa_object_imp.cpp:1557:9
    #8 0x152cca6 in CXFA_ScriptContext::NormalPropertySetter(_FXJSE_HOBJECT*, CFX_ByteStringC const&, _FXJSE_HVALUE*) /usr/local/google/tsepez/b1/src/out_asan/R
elease/../../third_party/pdfium/xfa/src/fxfa/src/parser/xfa_script_imp.cpp:273:9
    #9 0x15485ca in FXJSE_V8ProxyCallback_getOwnPropertyDescriptor_setter(v8::FunctionCallbackInfo<v8::Value> const&) /usr/local/google/tsepez/b1/src/out_asan/R
elease/../../third_party/pdfium/xfa/src/fxjse/src/dynprop.cpp:113:5
    #10 0x10065cd in v8::internal::FunctionCallbackArguments::Call(void (*)(v8::FunctionCallbackInfo<v8::Value> const&)) /usr/local/google/tsepez/b1/src/out_asa
n/Release/../../v8/src/arguments.cc:33:3
    #11 0xb0a771 in v8::internal::Object* v8::internal::HandleApiCallHelper<false>(v8::internal::(anonymous namespace)::BuiltinArguments<(v8::internal::BuiltinE
xtraArguments)1>, v8::internal::Isolate*) 
/usr/local/google/tsepez/b1/src/out_asan/Release/../../v8/src/builtins.cc:1140:3
5

Original issue reported on code.google.com by tsepez@chromium.org on 18 Nov 2014 at 9:33

[GoogleCodeExporter]

m_pEnvList.GetAt(0) aborts when m_pEnvList is empty.  This should have been set 
by FPDFDOC_InitFormFillEnvironment(), but pdfium_test is still passing version 
== 1 even on the XFA branch.

Original comment by tsepez@chromium.org on 18 Nov 2014 at 9:35

[GoogleCodeExporter]

CL at https://codereview.chromium.org/743493004/

Original comment by tsepez@chromium.org on 18 Nov 2014 at 10:03

[GoogleCodeExporter]

https://pdfium.googlesource.com/pdfium/+/ed63138d4ce674c4efaedd8f19ee7accac1c8aa
2

Original comment by tsepez@chromium.org on 18 Nov 2014 at 10:10

• Changed state: Fixed