diff options
| author | Bo Xu <bo_xu@foxitsoftware.com> | 2014-08-02 15:13:46 -0700 |
|---|---|---|
| committer | Bo Xu <bo_xu@foxitsoftware.com> | 2014-08-02 15:13:46 -0700 |
| commit | 465c2a84ba709d932040c9e80db508e93c138da6 (patch) | |
| tree | 07396342b637775b5350e896ba99ac0834e6e2f9 /core/src/fpdfdoc/doc_formfield.cpp | |
| parent | 90d1f9b9fdcbdab22beec36ceddee782ac0f8a39 (diff) | |
| download | pdfium-chromium/2113.tar.xz | |
Fix buffer size boundary check offset by 1chromium/2117chromium/2116chromium/2115chromium/2114chromium/2113
When newPos == file size, the current block will not be read or Get. If this block is a crucial part of the document (like m_pTrailer), the program will exit with parse error and
the document will not be rendered.
BUG=None
R=jun_fang@foxitsoftware.com
Review URL: https://codereview.chromium.org/440563003
Diffstat (limited to 'core/src/fpdfdoc/doc_formfield.cpp')
0 files changed, 0 insertions, 0 deletions