diff options
| author | kcwu <kcwu@chromium.org> | 2016-09-22 11:45:50 -0700 |
|---|---|---|
| committer | Commit bot <commit-bot@chromium.org> | 2016-09-22 11:45:50 -0700 |
| commit | 869a4381b12dadfabe9750bd4d1a3867241917c8 (patch) | |
| tree | 4570d85e433337653766287d8b96f8e3e5c33f9b /third_party/lcms2-2.6/README.pdfium | |
| parent | fef62e1f2bbf064100e6e262a10653f2374bfd2b (diff) | |
| download | pdfium-869a4381b12dadfabe9750bd4d1a3867241917c8.tar.xz | |
Fix infinite loop when calling GrowNamedColorList
Handle the case that GrowNamedColorList return fail when list is too
long. Otherwise the loop never ends.
Found by libfuzzer
Review-Url: https://codereview.chromium.org/2365663002
Diffstat (limited to 'third_party/lcms2-2.6/README.pdfium')
| -rw-r--r-- | third_party/lcms2-2.6/README.pdfium | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/third_party/lcms2-2.6/README.pdfium b/third_party/lcms2-2.6/README.pdfium index 6c3d5dd4ef..c15b2b1221 100644 --- a/third_party/lcms2-2.6/README.pdfium +++ b/third_party/lcms2-2.6/README.pdfium @@ -11,4 +11,5 @@ Local Modifications: 0000-tag-type-confusion.patch: Fix a type confusion. 0001-from16-to-8-overflow.patch: Prevent a UBSan warning. +0002-infinite-loop-GrowNamedColorList.patch: Fix infinite loop when calling GrowNamedColorList. TODO(ochang): List other patches. |