commit | d734d197bb5462a65c37b17594a8c8d07dd79bc1 | [log] [tgz] |
---|---|---|
author | tsepez <tsepez@chromium.org> | Wed Sep 03 23:17:49 2014 |
committer | Commit bot <commit-bot@chromium.org> | Wed Sep 03 23:21:06 2014 |
tree | 68915fea247006ba0c0e9753a0b74d8342af8c97 | |
parent | 7e4346c9e4ee487beffe85381eab4d4c08a45434 [diff] |
Avoid OOB memcpy in chrome_pdf::CopyImage. This is a re-work of palmer's patch at https://codereview.chromium.org/515023002/ which has more context, but comes down to stricter bounds checking. We also correct an arithmetic bug when copying the image behind a control that is positioned before the origin of the image. BUG=398384 Review URL: https://codereview.chromium.org/519873002 Cr-Commit-Position: refs/heads/master@{#293213}