Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(106)

Side by Side Diff: testing/resources/bug_507316.pdf

Issue 1332653002: Merge to XFA:Fix heap use after free in CPDFSDK_Annot::GetPDFAnnot. (Closed) Base URL: https://pdfium.googlesource.com/pdfium.git@xfa
Patch Set: Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « testing/resources/bug_507316.in ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 %PDF-1.7
2 % ò¤ô
3 1 0 obj <<
4 /Type /Catalog
5 /Pages 2 0 R
6 /OpenAction 4 0 R
7 /AcroForm 3 0 R
8 >>
9 endobj
10 2 0 obj <<
11 /Type /Pages
12 /Count 3
13 /Kids [6 0 R 7 0 R 8 0 R ]
14 >>
15 endobj
16 3 0 obj <<
17 /CO [11 0 R]
18 /Fields [11 0 R 9 0 R]
19 >>
20 endobj
21 4 0 obj <<
22 /Type /Action
23 /S /JavaScript
24 /JS 5 0 R
25 >>
26 endobj
27 5 0 obj <<>>
28 stream
29 var i = 0;
30 function run()
31 {
32 t = this.getField('txtName1');
33 t2 = this.getField('txtName2');
34 t2.setFocus();
35 t.setFocus();
36 t.value='G';
37 }
38
39 function remove(){
40 if (i==1){
41 this.removeField('txtName2');
42 }
43 i++;
44 }
45
46 app.setTimeOut('run()',2000);
47 endstream
48 endobj
49 6 0 obj <<
50 /Type /Page
51 /Parent 2 0 R
52 /MediaBox [0 0 612 792]
53 /Resources <<>>
54 >>
55 endobj
56 7 0 obj <<
57 /Type /Page
58 /Parent 2 0 R
59 /MediaBox [0 0 612 792]
60 /Resources <<>>
61 >>
62 endobj
63 8 0 obj <<
64 /Type /Page
65 /Parent 2 0 R
66 /MediaBox [0 0 612 792]
67 /Resources <<>>
68 /Annots [9 0 R 11 0 R]
69 >>
70 endobj
71 9 0 obj <<
72 /FT /Tx
73 /Type /Annot
74 /Subtype /Widget
75 /T (txtName2)
76 /F 4
77 /AP <</N 10 0 R>>
78 /Rect [20 20 400 60]
79 >>
80 endobj
81 10 0 obj <<
82 /Type /XObject
83 /Subtype /Form
84 /FormType 1
85 >>
86 endobj
87 11 0 obj <<
88 /FT /Tx
89 /Type /Annot
90 /Subtype /Widget
91 /T (txtName1)
92 /F 4
93 /AP <</N 12 0 R>>
94 /Rect [200 200 400 260]
95 /AA 13 0 R
96 >>
97 endobj
98 12 0 obj <<
99 /Type /XObject
100 /Subtype /Form
101 /FormType 1
102 >>
103 endobj
104 13 0 obj <<
105 /C 14 0 R
106 >>
107 endobj
108 14 0 obj <<
109 /Type /Action
110 /S /JavaScript
111 /JS 15 0 R
112 >>
113 endobj
114 15 0 obj <<>>
115 stream
116 this.getField('txtName2').value='B';
117 this.pageNum=1;
118 remove();
119 endstream
120 endobj
121 xref
122 0 16
123 0000000000 65535 f
124 0000000015 00000 n
125 0000000106 00000 n
126 0000000182 00000 n
127 0000000243 00000 n
128 0000000309 00000 n
129 0000000602 00000 n
130 0000000697 00000 n
131 0000000792 00000 n
132 0000000912 00000 n
133 0000001043 00000 n
134 0000001113 00000 n
135 0000001261 00000 n
136 0000001331 00000 n
137 0000001365 00000 n
138 0000001433 00000 n
139 trailer <<
140 /Size 15
141 /Root 1 0 R
142 >>
143 startxref
144 1534
145 %%EOF
OLDNEW
« no previous file with comments | « testing/resources/bug_507316.in ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698