diff options
| author | JUN FANG <jun_fang@foxitsoftware.com> | 2015-05-21 09:56:11 -0700 |
|---|---|---|
| committer | JUN FANG <jun_fang@foxitsoftware.com> | 2015-05-21 09:56:11 -0700 |
| commit | bc4b82ea7a9c6603c6a1c89e00f4e6381c1b6804 (patch) | |
| tree | 1151fbe2fef562cd7589949b67c83cbe08d504e3 /core/src/fxge | |
| parent | 79569e74ddddb12b3a76d211d826be2a3d87d0d0 (diff) | |
| download | pdfium-bc4b82ea7a9c6603c6a1c89e00f4e6381c1b6804.tar.xz | |
Fix an endless loop in CJBig2_HuffmanTable::parseFromCodedBuffer
This issue is trigged by the conversion from unsigned int to signed int.
A large unsigned int is converted to int. It's represented as a negative
int which is used in the condition of while later.
BUG=482639
R=brucedawson@chromium.org
Review URL: https://codereview.chromium.org/1146913003
Diffstat (limited to 'core/src/fxge')
0 files changed, 0 insertions, 0 deletions