summaryrefslogtreecommitdiff
path: root/third_party/lcms2-2.6/src
diff options
context:
space:
mode:
authorkcwu <kcwu@chromium.org>2016-09-26 12:00:31 -0700
committerCommit bot <commit-bot@chromium.org>2016-09-26 12:00:31 -0700
commit87c658d72ec1e2167fe60d97dcc1ca0301e920ea (patch)
treef34da42fc0d0fa689ab713591e9d259c76d921e2 /third_party/lcms2-2.6/src
parentbfe9afc2ab1d883bb036a1c3b35b429229708875 (diff)
downloadpdfium-87c658d72ec1e2167fe60d97dcc1ca0301e920ea.tar.xz
Fix memory leak in lcms, MPEmatrix_Read
BUG=650277 Review-Url: https://codereview.chromium.org/2371723003
Diffstat (limited to 'third_party/lcms2-2.6/src')
-rw-r--r--third_party/lcms2-2.6/src/cmstypes.c12
1 files changed, 10 insertions, 2 deletions
diff --git a/third_party/lcms2-2.6/src/cmstypes.c b/third_party/lcms2-2.6/src/cmstypes.c
index 441d6bb241..15199c7084 100644
--- a/third_party/lcms2-2.6/src/cmstypes.c
+++ b/third_party/lcms2-2.6/src/cmstypes.c
@@ -4203,7 +4203,11 @@ void *Type_MPEmatrix_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io
cmsFloat32Number v;
- if (!_cmsReadFloat32Number(io, &v)) return NULL;
+ if (!_cmsReadFloat32Number(io, &v)) {
+ _cmsFree(self ->ContextID, Matrix);
+ _cmsFree(self ->ContextID, Offsets);
+ return NULL;
+ }
Matrix[i] = v;
}
@@ -4212,7 +4216,11 @@ void *Type_MPEmatrix_Read(struct _cms_typehandler_struct* self, cmsIOHANDLER* io
cmsFloat32Number v;
- if (!_cmsReadFloat32Number(io, &v)) return NULL;
+ if (!_cmsReadFloat32Number(io, &v)) {
+ _cmsFree(self ->ContextID, Matrix);
+ _cmsFree(self ->ContextID, Offsets);
+ return NULL;
+ }
Offsets[i] = v;
}