diff options
author | kcwu <kcwu@chromium.org> | 2016-09-23 09:26:51 -0700 |
---|---|---|
committer | Commit bot <commit-bot@chromium.org> | 2016-09-23 09:26:51 -0700 |
commit | 4dd613cb51c1d77ac2998f760325ed5b93f4ebf0 (patch) | |
tree | 5026a0aa7a55f6f0edfc40702ec5f55fd05502ff /core/fpdfapi | |
parent | 3f4111fbff1233de9f5c67eda433bee0f5f88c4e (diff) | |
download | pdfium-4dd613cb51c1d77ac2998f760325ed5b93f4ebf0.tar.xz |
Bail out on bad width and height in CCodec_FaxDecoder::CreateDecoder
BUG=648935,649436
Review-Url: https://codereview.chromium.org/2360283004
Diffstat (limited to 'core/fpdfapi')
-rw-r--r-- | core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp | 3 |
1 files changed, 0 insertions, 3 deletions
diff --git a/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp b/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp index 72a9518ca9..1b5bd024f8 100644 --- a/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp +++ b/core/fpdfapi/fpdf_parser/fpdf_parser_decode.cpp @@ -248,9 +248,6 @@ CCodec_ScanlineDecoder* FPDFAPI_CreateFaxDecoder( if (Rows > USHRT_MAX) { Rows = 0; } - if (Columns <= 0 || Rows < 0 || Columns > USHRT_MAX || Rows > USHRT_MAX) { - return nullptr; - } } return CPDF_ModuleMgr::Get()->GetFaxModule()->CreateDecoder( src_buf, src_size, width, height, K, EndOfLine, ByteAlign, BlackIs1, |