diff options
| author | JUN FANG <jun_fang@foxitsoftware.com> | 2015-01-31 10:12:50 -0800 |
|---|---|---|
| committer | JUN FANG <jun_fang@foxitsoftware.com> | 2015-02-10 08:54:26 -0800 |
| commit | efe41083f4e42508bb44095cfd9dcccbf2c297d2 (patch) | |
| tree | e2a1d807b90ea9095cdfc9bbc3b243ae6b787e40 /core/include/fxcrt | |
| parent | b045ed21ec797b5d05a6cef819451b0e8bfdee47 (diff) | |
| download | pdfium-efe41083f4e42508bb44095cfd9dcccbf2c297d2.tar.xz | |
Merge to XFA: Fix heap buffer overflow in CPDF_SampledFunc::v_Call
This issue was caused by integer overflow in CPDF_SampledFunc::v_Call.
The root cause of this issue is that the content in the test pdf file
was damaged. The solution is to check whether an integer is overflow
before using it.
BUG=452455
R=tsepez@chromium.org
Review URL: https://codereview.chromium.org/886953002
Diffstat (limited to 'core/include/fxcrt')
0 files changed, 0 insertions, 0 deletions