diff options
| author | hong_zhang <hong_zhang@foxitsoftware.com> | 2016-08-12 15:15:56 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2016-08-12 15:15:56 -0700 |
| commit | 8374fe4a11a513b23297e29d38c376d8cf36e8bf (patch) | |
| tree | 84088626be0245660387abc76c6c9987ee4e15d3 /core/fxcodec/lgif/fx_gif.h | |
| parent | c6833c2366e97b4779641464bf1d14d4115cc51d (diff) | |
| download | pdfium-8374fe4a11a513b23297e29d38c376d8cf36e8bf.tar.xz | |
fix 617135
to fix bug 617135
617135 described an exploit against pdfium using a malformed gif.
This fix introduced a couple edge case handling lines to address
the OOB issue.
BUG= 617135
Review-Url: https://codereview.chromium.org/2230683002
Diffstat (limited to 'core/fxcodec/lgif/fx_gif.h')
| -rw-r--r-- | core/fxcodec/lgif/fx_gif.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/core/fxcodec/lgif/fx_gif.h b/core/fxcodec/lgif/fx_gif.h index b7157df429..c669e9851e 100644 --- a/core/fxcodec/lgif/fx_gif.h +++ b/core/fxcodec/lgif/fx_gif.h @@ -291,6 +291,8 @@ int32_t gif_load_frame(gif_decompress_struct_p gif_ptr, int32_t frame_num); uint8_t* gif_read_data(gif_decompress_struct_p gif_ptr, uint8_t** des_buf_pp, uint32_t data_size); +void gif_decoding_failure_at_tail_cleanup(gif_decompress_struct_p gif_ptr, + GifImage* gif_image_ptr); void gif_save_decoding_status(gif_decompress_struct_p gif_ptr, int32_t status); void gif_input_buffer(gif_decompress_struct_p gif_ptr, uint8_t* src_buf, |