diff options
| author | Nicolas Pena <npm@chromium.org> | 2017-06-14 14:52:49 -0400 |
|---|---|---|
| committer | Chromium commit bot <commit-bot@chromium.org> | 2017-06-14 20:46:00 +0000 |
| commit | ce67be4c48bf1bdc037141237c1db6ecc2054337 (patch) | |
| tree | ebe99ef44f9b304666e475edbecf3ba3b69d9c31 /third_party/lcms2-2.6/0017-upstream-integer-overflow-MPEmatrix_Read.patch | |
| parent | 603a31d0c509c7ce3c2709dcb5377a78e6ce4815 (diff) | |
| download | pdfium-ce67be4c48bf1bdc037141237c1db6ecc2054337.tar.xz | |
Fix crash when inserting empty path
The path creation method begins with an open MoveTo point. If nothing
else is added, CFX_PathData::GetBoundingBox will try an OOB access in
its m_Points. This CL adds a check similar to the one in
CPDF_StreamContentParser::AddPathObject.
Change-Id: Iec7cfe3379253c021ba7d5f276306a66009f84e2
Reviewed-on: https://pdfium-review.googlesource.com/6593
Commit-Queue: Nicolás Peña <npm@chromium.org>
Commit-Queue: dsinclair <dsinclair@chromium.org>
Reviewed-by: dsinclair <dsinclair@chromium.org>
Diffstat (limited to 'third_party/lcms2-2.6/0017-upstream-integer-overflow-MPEmatrix_Read.patch')
0 files changed, 0 insertions, 0 deletions