diff options
| author | Artem Strygin <art-snake@yandex-team.ru> | 2017-09-08 18:10:01 +0300 |
|---|---|---|
| committer | Chromium commit bot <commit-bot@chromium.org> | 2017-09-19 00:15:50 +0000 |
| commit | 2c559dc576392e69208895f2632f49ee43903d48 (patch) | |
| tree | 0d9d281df2dd854f09e44f3e0dfab40f76c07cf8 /core/fpdfapi/parser/cpdf_linearized_header.cpp | |
| parent | 0bf6961663ec38568b9323e66a8c808d9aa726fb (diff) | |
| download | pdfium-2c559dc576392e69208895f2632f49ee43903d48.tar.xz | |
Use CPDF_ReadValidator to request linearized hint tables.
Change-Id: I9ecf08c5cabfeb7b354abeb46b94918ae0b4539a
Reviewed-on: https://pdfium-review.googlesource.com/13590
Commit-Queue: Art Snake <art-snake@yandex-team.ru>
Reviewed-by: dsinclair <dsinclair@chromium.org>
Diffstat (limited to 'core/fpdfapi/parser/cpdf_linearized_header.cpp')
| -rw-r--r-- | core/fpdfapi/parser/cpdf_linearized_header.cpp | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/core/fpdfapi/parser/cpdf_linearized_header.cpp b/core/fpdfapi/parser/cpdf_linearized_header.cpp index a56d64f259..4d0b0e0acc 100644 --- a/core/fpdfapi/parser/cpdf_linearized_header.cpp +++ b/core/fpdfapi/parser/cpdf_linearized_header.cpp @@ -61,7 +61,9 @@ CPDF_LinearizedHeader::CPDF_LinearizedHeader(const CPDF_Dictionary* pDict) { pHintStreamRange ? pHintStreamRange->GetCount() : 0; if (nHintStreamSize == 2 || nHintStreamSize == 4) { m_szHintStart = std::max(pHintStreamRange->GetIntegerAt(0), 0); - m_szHintLength = std::max(pHintStreamRange->GetIntegerAt(1), 0); + const FX_SAFE_UINT32 safe_hint_length = pHintStreamRange->GetIntegerAt(1); + if (safe_hint_length.IsValid()) + m_HintLength = safe_hint_length.ValueOrDie(); } } |