Merge to XFA: Fix heap buffer overflow in CPDF_SampledFunc::v_Call
authorJUN FANG <jun_fang@foxitsoftware.com>
Sat, 31 Jan 2015 18:12:50 +0000 (10:12 -0800)
committerJUN FANG <jun_fang@foxitsoftware.com>
Tue, 10 Feb 2015 16:54:26 +0000 (08:54 -0800)
commitefe41083f4e42508bb44095cfd9dcccbf2c297d2
treee2a1d807b90ea9095cdfc9bbc3b243ae6b787e40
parentb045ed21ec797b5d05a6cef819451b0e8bfdee47
Merge to XFA: Fix heap buffer overflow in CPDF_SampledFunc::v_Call

This issue was caused by integer overflow in CPDF_SampledFunc::v_Call.
The root cause of this issue is that the content in the test pdf file
was damaged. The solution is to check whether an integer is overflow
before using it.

BUG=452455
R=tsepez@chromium.org

Review URL: https://codereview.chromium.org/886953002
core/src/fpdfapi/fpdf_page/fpdf_page_func.cpp