diff options
| author | ochang <ochang@chromium.org> | 2016-04-11 13:47:41 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2016-04-11 13:47:41 -0700 |
| commit | b8627c9d13884d48943d8a7a5381eaf0bb2c08d9 (patch) | |
| tree | 8357843404f8bea28b7930acb888eb853d822a9a /testing/resources/bug_601362.pdf | |
| parent | 184b82553000a41fd0c90be56fa2f1c1503e2e9e (diff) | |
| download | pdfium-b8627c9d13884d48943d8a7a5381eaf0bb2c08d9.tar.xz | |
Fix integer issues leading to out of bounds access in fx_ge_text.cpp.
- Using |-skew| to get positive index, which doesn't work when skew is
INT_MIN
- Incorrect logic when determining when to use |-skew| as an index.
R=tsepez@chromium.org,weili@chromium.org
BUG=chromium:601362
Review URL: https://codereview.chromium.org/1875673004
Diffstat (limited to 'testing/resources/bug_601362.pdf')
| -rw-r--r-- | testing/resources/bug_601362.pdf | 105 |
1 files changed, 105 insertions, 0 deletions
diff --git a/testing/resources/bug_601362.pdf b/testing/resources/bug_601362.pdf new file mode 100644 index 0000000000..d21a83405e --- /dev/null +++ b/testing/resources/bug_601362.pdf @@ -0,0 +1,105 @@ +%PDF-1.5 +%¿÷¢þ +1 0 obj +<< /Lang (en-US) /MarkInfo << /Marked true >> /Pages 3 0 R /Type /Catalog >> +endobj +2 0 obj +<< /CreationDate (D:20160411190039+00'00') /Creator (Microsoft Word) /ModDate (D:20160411190039+00'00') >> +endobj +3 0 obj +<< /Count 1 /Kids [ 4 0 R ] /Type /Pages >> +endobj +4 0 obj +<< /Contents 5 0 R /Group << /CS /DeviceRGB /S /Transparency /Type /Group >> /MediaBox [ 0 0 612 792 ] /Parent 3 0 R /Resources << /ExtGState << /GS7 6 0 R /GS8 7 0 R >> /Font << /F1 8 0 R /F2 9 0 R >> /ProcSet [ /PDF /Text /ImageB /ImageC /ImageI ] >> /StructParents 0 /Tabs /S /Type /Page >> +endobj +5 0 obj +<< /Length 464 >> +stream + /P <</MCID 0>> BDC q +0.00000912 0 612 792 re +W* n +BT +/F1 11 Tf +1 0 0 1 72.025 709.72 Tm +/GS7 gs +0 g +/GS8 gs +0 G +[(T)10(est)] TJ +ET +Q +q +0.00000912 0 612 792 re +W* n +BT +/F2 11 Tf +1 0 0 1 90.8 709.72 Tm +0 g +0 G +[( )] TJ +ET +Q +q +0.00000912 0 612 792 re +W* n +BT +/F2 11 Tf +1 0 0 1 93.3 709.72 Tm +0 g +0 G +[(f)10(il)5(e.)] TJ +ET +Q +q +0.00000912 0 612 792 re +W* n +BT +/F1 11 Tf +1 0 0 1 109.8 709.72 Tm +0 g +0 G +[( )] TJ +ET +Q + EMC endstream +endobj +6 0 obj +<< /BM /Normal /Type /ExtGState /ca 1 >> +endobj +7 0 obj +<< /BM /Normal /CA 1 /Type /ExtGState >> +endobj +8 0 obj +<< /BaseFont /ABCDEE+Calibri /Encoding /WinAnsiEncoding /FirstChar 32 /FontDescriptor 10 0 R /LastChar 116 /Name /F1 /Subtype /TrueType /Type /Font /Widths 11 0 R >> +endobj +9 0 obj +<< /BaseFont /ABCDEE+Calibri,Italic /Encoding /WinAnsiEncoding /FirstChar 32 /FontDescriptor 12 0 R /LastChar 108 /Name /F2 /Subtype /TrueType /Type /Font >> +endobj +10 0 obj +<< /Ascent 750 /AvgWidth 521 /CapHeight 750 /Descent -250 /Flags 32 /FontBBox [ -503 -250 1240 750 ] /FontName /ABCDEE+Calibri /FontWeight 400 /ItalicAngle 0 /MaxWidth 1743 /StemV 52 /Type /FontDescriptor /XHeight 250 >> +endobj +11 0 obj +[ 226 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 487 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 498 0 0 0 0 0 0 0 0 0 0 0 0 0 391 335 ] +endobj +12 0 obj +<< /Ascent 750 /AvgWidth 521 /CapHeight 750 /Descent -250 /Flags 32 /FontBBox [ -725 -250 1260 750 ] /FontName /ABCDEE+Calibri,Italic /FontWeight 400 /ItalicAngle 2147483649 /MaxWidth 1984 /StemV 52 /Type /FontDescriptor /XHeight 250 >> +endobj +xref +0 13 +0000000000 65535 f +0000000015 00000 n +0000000107 00000 n +0000000229 00000 n +0000000288 00000 n +0000000597 00000 n +0000001111 00000 n +0000001167 00000 n +0000001223 00000 n +0000001404 00000 n +0000001577 00000 n +0000001814 00000 n +0000002014 00000 n +trailer << /Info 2 0 R /Root 1 0 R /Size 13 /ID [<205a1ea7cf6e0a45ac68694d38f6b9f7><32b8937a599b7da08d5dc591fd416f1b>] >> +startxref +2267 +%%EOF |