pdfium.git - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2016-10-26	libtiff: Prevent a buffer overflow in function PixarLogDecode.	stackexploit
	Fix potential buffer write overrun in PixarLogDecode() on corrupted/unexpected images. The issue has been fixed in upstream (libtiff revision 1.44, author: erouault, commitid: 2SqWSFG5a8Ewffcz, date: 2016-06-28 23:12:19 +0800). This CL applies the official patch to tif_pixarlog.c. BUG=chromium:654172 R=dsinclair@chromium.org, thestig@chromium.org Review-Url: https://codereview.chromium.org/2453253003
2016-10-10	libtiff: Prevent a buffer overflow in function ChopUpSingleUncompressedStrip.	stackexploit
	The patch (https://codereview.chromium.org/2284063002) for Issue 618267 was insufficient. The integer overflow still could be triggered and could lead to heap buffer overflow. This CL strengthens integer overflow check in function _TIFFCheckRealloc. BUG=chromium:654169 R=ochang@chromium.org, tsepez@chromium.org, dsinclair@chromium.org Review-Url: https://codereview.chromium.org/2405693002
2016-10-03	Fix potentially uninitialized value.chromium/2880	dsinclair
	Depending on what ReadOK does it's possible for \|dircount16\| to be used without being initialized. The read code calls back into PDFium specific code which then calls into the stream reading code. Initialize the value to be sure it is set. BUG=chromium:651632 Review-Url: https://codereview.chromium.org/2389993002
2016-08-29	Fix for #618267. Adding a method to determine if multiplication has	tracy_jiang
	overflow. BUG=618267 Review-Url: https://codereview.chromium.org/2284063002
2016-08-01	Fix a memory leak in libtiff.	thestig
	BUG=633387 Review-Url: https://codereview.chromium.org/2204793002
2016-06-09	Apply security fixes to libtiff that are not in 4.0.6.	thestig
	BUG=618164 Review-Url: https://codereview.chromium.org/2054993002
2016-03-11	Set HAVE_SEARCH_H so that pdfium/xfa builds with VS 2015	Bruce Dawson
	Enabling of XFA-Forms in crrev.com/1775173002 broke VS 2015 builds because of a conflict between the lfind declaration in libtiff\tiffiop.h and the one that ships with VS 2015. Defining HAVE_SEARCH_H for VS 2015 builds fixes this problem BUG=440500,593996 R=thakis@chromium.org, tsepez@chromium.org Review URL: https://codereview.chromium.org/1781043005 .
2016-01-07	XFA: Upgrade to libtiff 4.0.6.	Lei Zhang
	R=jun_fang@foxitsoftware.com, tsepez@chromium.org Review URL: https://codereview.chromium.org/1563103002 .