summaryrefslogtreecommitdiff
path: root/core/fpdfapi/fpdf_page/cpdf_psengine.h
diff options
context:
space:
mode:
authortsepez <tsepez@chromium.org>2016-09-20 05:56:50 -0700
committerCommit bot <commit-bot@chromium.org>2016-09-20 05:56:50 -0700
commit044b1d6f4929dd8905a259c1e134f2e582726d3b (patch)
tree09f2d32ff9d80e2a8dfba562ef489417c11cfeaa /core/fpdfapi/fpdf_page/cpdf_psengine.h
parent81e1e3fd2d33478733e47bd007b76fac1a663e74 (diff)
downloadpdfium-044b1d6f4929dd8905a259c1e134f2e582726d3b.tar.xz
Fix stack exhaustion in CPDF_PSProc::Parse()
BUG=648059 Review-Url: https://codereview.chromium.org/2350013003
Diffstat (limited to 'core/fpdfapi/fpdf_page/cpdf_psengine.h')
-rw-r--r--core/fpdfapi/fpdf_page/cpdf_psengine.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/core/fpdfapi/fpdf_page/cpdf_psengine.h b/core/fpdfapi/fpdf_page/cpdf_psengine.h
index fc8badbe6d..c154eb8ac8 100644
--- a/core/fpdfapi/fpdf_page/cpdf_psengine.h
+++ b/core/fpdfapi/fpdf_page/cpdf_psengine.h
@@ -70,10 +70,11 @@ class CPDF_PSProc {
CPDF_PSProc();
~CPDF_PSProc();
- FX_BOOL Parse(CPDF_SimpleParser* parser);
+ FX_BOOL Parse(CPDF_SimpleParser* parser, int depth);
FX_BOOL Execute(CPDF_PSEngine* pEngine);
private:
+ static const int kMaxDepth = 128;
std::vector<std::unique_ptr<CPDF_PSOP>> m_Operators;
};