diff options
author | Lei Zhang <thestig@chromium.org> | 2018-08-20 17:51:49 +0000 |
---|---|---|
committer | Chromium commit bot <commit-bot@chromium.org> | 2018-08-20 17:51:49 +0000 |
commit | 79d8cfb7848c05bc34c2c0a10276c9919a9b4e96 (patch) | |
tree | 7ac28bf9807ed9a338e48f91186aa6b5bc177512 /core/fpdfdoc/cpdf_interform.cpp | |
parent | f01e4a5ec03c6b232d41dc878a3640924150f2a7 (diff) | |
download | pdfium-79d8cfb7848c05bc34c2c0a10276c9919a9b4e96.tar.xz |
Avoid an integer overflow in CFX_RTFBreak.
The root cause is an extremely large reserve count. Limit it to the size
of the widget.
BUG=chromium:875282
Change-Id: Ia3bbb07503ce349adc2662731d22317bda7df4ef
Reviewed-on: https://pdfium-review.googlesource.com/40652
Reviewed-by: Ryan Harrison <rharrison@chromium.org>
Reviewed-by: Henrique Nakashima <hnakashima@chromium.org>
Commit-Queue: Henrique Nakashima <hnakashima@chromium.org>
Commit-Queue: Lei Zhang <thestig@chromium.org>
Diffstat (limited to 'core/fpdfdoc/cpdf_interform.cpp')
0 files changed, 0 insertions, 0 deletions