summaryrefslogtreecommitdiff
path: root/core/fpdfapi/font/cpdf_fontencoding.cpp
diff options
context:
space:
mode:
authorkcwu <kcwu@chromium.org>2016-10-04 19:00:41 -0700
committerCommit bot <commit-bot@chromium.org>2016-10-04 19:00:41 -0700
commit958e57cbe864f356140b74cbc3b70bf352187bd4 (patch)
treeec334c7db2f0ab35e926f19c2c7763746d99a042 /core/fpdfapi/font/cpdf_fontencoding.cpp
parent98c6c15abfec45648d85c73e746f0cb109a8d35b (diff)
downloadpdfium-958e57cbe864f356140b74cbc3b70bf352187bd4.tar.xz
Fix cmdStageAllocMatrix parameter swap
For cmdStageAllocMatrix, InputChans is length of Matrix, OutputChans is length of Offsets. The original code will allocate NewElem->Offset with length Cols=InputChans (cmslut.c:417). This results in heap buffer overflow later. BUG=chromium:651849 Review-Url: https://codereview.chromium.org/2384063006
Diffstat (limited to 'core/fpdfapi/font/cpdf_fontencoding.cpp')
0 files changed, 0 insertions, 0 deletions