From 8252bc1e5a42ab406fb5f9f968623ea0c83b8656 Mon Sep 17 00:00:00 2001 From: thestig Date: Tue, 23 Aug 2016 18:11:30 -0700 Subject: Fix one more integer overflow in ReadPageHintTable(). BUG=637119 Review-Url: https://codereview.chromium.org/2274723002 --- core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp') diff --git a/core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp b/core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp index 18a7b8f079..4363d3924c 100644 --- a/core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp +++ b/core/fpdfapi/fpdf_parser/cpdf_hint_tables.cpp @@ -122,7 +122,7 @@ bool CPDF_HintTables::ReadPageHintTable(CFX_BitStream* hStream) { // than enough to represent most of the values here. constexpr uint32_t kMaxBits = 34; if (dwSharedObjBits > kMaxBits || dwDeltaObjectsBits > kMaxBits || - dwSharedIdBits > kMaxBits) { + dwDeltaPageLenBits > kMaxBits || dwSharedIdBits > kMaxBits) { return false; } -- cgit v1.2.3