2 files changed, 10 insertions, 1 deletions
diff --git a/xfa/fxfa/fm2js/cxfa_fmparser.cpp b/xfa/fxfa/fm2js/cxfa_fmparser.cpp
index 2981a4dd84..18c37c5b6a 100644
--- a/xfa/fxfa/fm2js/cxfa_fmparser.cpp
+++ b/xfa/fxfa/fm2js/cxfa_fmparser.cpp
@@ -814,7 +814,7 @@ std::unique_ptr<CXFA_FMSimpleExpression> CXFA_FMParser::ParsePostExpression(
         }
         CFX_WideStringC tempStr = m_token->m_string;
         uint32_t tempLine = m_token->m_line_num;
-        if (NextToken())
+        if (!NextToken())
           return nullptr;
         if (m_token->m_type != TOKlbracket) {
           std::unique_ptr<CXFA_FMSimpleExpression> s =
diff --git a/xfa/fxfa/fm2js/cxfa_fmparser_unittest.cpp b/xfa/fxfa/fm2js/cxfa_fmparser_unittest.cpp
index 214fd4aec3..4a17067087 100644
--- a/xfa/fxfa/fm2js/cxfa_fmparser_unittest.cpp
+++ b/xfa/fxfa/fm2js/cxfa_fmparser_unittest.cpp
@@ -114,3 +114,12 @@ TEST(CXFA_FMParserTest, MaxParseDepth) {
   EXPECT_EQ(nullptr, parser->Parse());
   EXPECT_TRUE(parser->HasError());
 }
+
+TEST(CFXA_FMParserTest, chromium752201) {
+  auto parser = pdfium::MakeUnique<CXFA_FMParser>(
+      L"fTep a\n"
+      L".#\n"
+      L"fo@ =[=l");
+  EXPECT_EQ(nullptr, parser->Parse());
+  EXPECT_TRUE(parser->HasError());
+}