From 3e4b1bc1ac4eb8372a90f95edd69131e54240976 Mon Sep 17 00:00:00 2001 From: foxit Date: Fri, 20 Jun 2014 16:48:43 -0700 Subject: Stack-buffer-overflow in IccLib_Translate BUG=382240 R=palmer@chromium.org Review URL: https://codereview.chromium.org/332143002 --- core/src/fxcodec/codec/codec_int.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'core/src/fxcodec/codec/codec_int.h') diff --git a/core/src/fxcodec/codec/codec_int.h b/core/src/fxcodec/codec/codec_int.h index 638d96db85..47f2c8e1fe 100644 --- a/core/src/fxcodec/codec/codec_int.h +++ b/core/src/fxcodec/codec/codec_int.h @@ -172,10 +172,12 @@ public: virtual void DestroyTransform(FX_LPVOID pTransform); virtual void Translate(FX_LPVOID pTransform, FX_FLOAT* pSrcValues, FX_FLOAT* pDestValues); virtual void TranslateScanline(FX_LPVOID pTransform, FX_LPBYTE pDest, FX_LPCBYTE pSrc, int pixels); + virtual void SetComponents(FX_DWORD nComponents) {m_nComponents = nComponents;} virtual ~CCodec_IccModule(); protected: CFX_MapByteStringToPtr m_MapTranform; CFX_MapByteStringToPtr m_MapProfile; + FX_DWORD m_nComponents; typedef enum { Icc_CLASS_INPUT = 0, Icc_CLASS_OUTPUT, -- cgit v1.2.3