summaryrefslogtreecommitdiff
path: root/core/fpdfapi/fpdf_parser
diff options
context:
space:
mode:
authorkcwu <kcwu@chromium.org>2016-09-23 09:26:51 -0700
committerCommit bot <commit-bot@chromium.org>2016-09-23 09:26:51 -0700
commit4dd613cb51c1d77ac2998f760325ed5b93f4ebf0 (patch)
tree5026a0aa7a55f6f0edfc40702ec5f55fd05502ff /core/fpdfapi/fpdf_parser
parent3f4111fbff1233de9f5c67eda433bee0f5f88c4e (diff)
downloadpdfium-4dd613cb51c1d77ac2998f760325ed5b93f4ebf0.tar.xz
Bail out on bad width and height in CCodec_FaxDecoder::CreateDecoder
BUG=648935,649436 Review-Url: https://codereview.chromium.org/2360283004
Diffstat (limited to 'core/fpdfapi/fpdf_parser')
-rw-r--r--core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp3
1 files changed, 0 insertions, 3 deletions
diff --git a/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp b/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp
index 72a9518ca9..1b5bd024f8 100644
--- a/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp
+++ b/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp
@@ -248,9 +248,6 @@ CCodec_ScanlineDecoder* FPDFAPI_CreateFaxDecoder(
if (Rows > USHRT_MAX) {
Rows = 0;
}
- if (Columns <= 0 || Rows < 0 || Columns > USHRT_MAX || Rows > USHRT_MAX) {
- return nullptr;
- }
}
return CPDF_ModuleMgr::Get()->GetFaxModule()->CreateDecoder(
src_buf, src_size, width, height, K, EndOfLine, ByteAlign, BlackIs1,