| commit | fb9d34d0b3031c6eb1f687710e7d831186e09ec9 | [log] [tgz] |
|---|---|---|
| author | fs@opera.com <fs@opera.com> | Fri Apr 10 08:00:26 2015 |
| committer | fs@opera.com <fs@opera.com> | Fri Apr 10 08:00:26 2015 |
| tree | ed8c0bd43505a56c2f627d54dea43664d99d66e3 | |
| parent | fe920a21a41e6153ffd369a93c74f5a2f4ce4441 [diff] |
SVGLength: Avoid reading out-of-bounds when parsing incorrect 'rem' unit
The read/check of the third char ('m') could end up reading outside the
buffer if unlucky.
BUG=368598, 470449
Review URL: https://codereview.chromium.org/1069213003
git-svn-id: svn://svn.chromium.org/blink/trunk@193523 bbb929c8-8fbe-4397-9dbb-9b2b20218538