summaryrefslogtreecommitdiff
path: root/fpdfsdk/fpdf_transformpage.cpp
diff options
context:
space:
mode:
authorLei Zhang <thestig@chromium.org>2018-06-08 18:05:58 +0000
committerChromium commit bot <commit-bot@chromium.org>2018-06-08 18:05:58 +0000
commit76d01feaeec421ebe6005f22de85998220703dd2 (patch)
treebf6333d06b3834849ceb82ad97ccf0ad2054040d /fpdfsdk/fpdf_transformpage.cpp
parentd8a8f2785144f6656cd84c82c865eed62885d36b (diff)
downloadpdfium-76d01feaeec421ebe6005f22de85998220703dd2.tar.xz
Do not crash if FPDFPage_Get{Media,Crop}Box() gets a NULL out parameter.
Change-Id: I4b61d4c7239caaf6081bcba80cc0d8ad61569474 Reviewed-on: https://pdfium-review.googlesource.com/34590 Commit-Queue: Lei Zhang <thestig@chromium.org> Reviewed-by: Henrique Nakashima <hnakashima@chromium.org>
Diffstat (limited to 'fpdfsdk/fpdf_transformpage.cpp')
-rw-r--r--fpdfsdk/fpdf_transformpage.cpp3
1 files changed, 3 insertions, 0 deletions
diff --git a/fpdfsdk/fpdf_transformpage.cpp b/fpdfsdk/fpdf_transformpage.cpp
index a3ba7ca7a9..210c6b6fde 100644
--- a/fpdfsdk/fpdf_transformpage.cpp
+++ b/fpdfsdk/fpdf_transformpage.cpp
@@ -36,6 +36,9 @@ bool GetBoundingBox(CPDF_Page* page,
float* bottom,
float* right,
float* top) {
+ if (!left || !bottom || !right || !top)
+ return false;
+
CPDF_Array* pArray = page->GetDict()->GetArrayFor(key);
if (!pArray)
return false;