From 869a4381b12dadfabe9750bd4d1a3867241917c8 Mon Sep 17 00:00:00 2001 From: kcwu Date: Thu, 22 Sep 2016 11:45:50 -0700 Subject: Fix infinite loop when calling GrowNamedColorList Handle the case that GrowNamedColorList return fail when list is too long. Otherwise the loop never ends. Found by libfuzzer Review-Url: https://codereview.chromium.org/2365663002 --- third_party/lcms2-2.6/README.pdfium | 1 + 1 file changed, 1 insertion(+) (limited to 'third_party/lcms2-2.6/README.pdfium') diff --git a/third_party/lcms2-2.6/README.pdfium b/third_party/lcms2-2.6/README.pdfium index 6c3d5dd4ef..c15b2b1221 100644 --- a/third_party/lcms2-2.6/README.pdfium +++ b/third_party/lcms2-2.6/README.pdfium @@ -11,4 +11,5 @@ Local Modifications: 0000-tag-type-confusion.patch: Fix a type confusion. 0001-from16-to-8-overflow.patch: Prevent a UBSan warning. +0002-infinite-loop-GrowNamedColorList.patch: Fix infinite loop when calling GrowNamedColorList. TODO(ochang): List other patches. -- cgit v1.2.3