| commit | d734d197bb5462a65c37b17594a8c8d07dd79bc1 | [log] [tgz] |
|---|---|---|
| author | tsepez <tsepez@chromium.org> | Wed Sep 03 23:17:49 2014 |
| committer | Commit bot <commit-bot@chromium.org> | Wed Sep 03 23:21:06 2014 |
| tree | 68915fea247006ba0c0e9753a0b74d8342af8c97 | |
| parent | 7e4346c9e4ee487beffe85381eab4d4c08a45434 [diff] |
Avoid OOB memcpy in chrome_pdf::CopyImage. This is a re-work of palmer's patch at https://codereview.chromium.org/515023002/ which has more context, but comes down to stricter bounds checking. We also correct an arithmetic bug when copying the image behind a control that is positioned before the origin of the image. BUG=398384 Review URL: https://codereview.chromium.org/519873002 Cr-Commit-Position: refs/heads/master@{#293213}