Use the correct remaining data length when parsing chunk headers.

chrome/browser/safe_browsing/protocol_parser.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 //
 // Parse the data returned from the SafeBrowsing v2.1 protocol response.
 
 #include <stdlib.h>
 
 #include "base/format_macros.h"
 #include "base/logging.h"
@@ skipping 181 matching lines @@
 
 bool SafeBrowsingProtocolParser::ParseChunk(const std::string& list_name,
                                             const char* data,
                                             int length,
                                             SBChunkList* chunks) {
   int remaining = length;
   const char* chunk_data = data;
 
   while (remaining > 0) {
     std::string cmd_line;
-    if (!GetLine(chunk_data, length, &cmd_line))
+    if (!GetLine(chunk_data, remaining, &cmd_line))
       return false;  // Error: bad chunk format!
 
     const int line_len = static_cast<int>(cmd_line.length()) + 1;
     chunk_data += line_len;
     remaining -= line_len;
     std::vector<std::string> cmd_parts;
     base::SplitString(cmd_line, ':', &cmd_parts);
     if (cmd_parts.size() != 4) {
       return false;
     }
@@ skipping 192 matching lines @@
       DCHECK_EQ(hash_len, (int)sizeof(SBFullHash));
       entry->SetFullHashAt(i, *reinterpret_cast<const SBFullHash*>(*data));
     }
     *data += hash_len;
     *remaining -= hash_len;
     DCHECK_GE(*remaining, 0);
   }
 
   return true;
 }