DescriptionMerge to M44: Fix an endless loop in CJBig2_HuffmanTable::parseFromCodedBuffer
This issue is trigged by the conversion from unsigned int to signed int.
A large unsigned int is converted to int. It's represented as a negative
int which is used in the condition of while later.
BUG=482639
R=brucedawson@chromium.org
Review URL: https://codereview.chromium.org/1146913003
(cherry picked from commit bc4b82ea7a9c6603c6a1c89e00f4e6381c1b6804)
Committed: https://pdfium.googlesource.com/pdfium/+/90805aa3cb40414f4eecce7d16b4dc66153dd49c
Patch Set 1 #
Messages
Total messages: 3 (0 generated)
|