Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(16)

Issue 1401263005: Stack exhaustion if PDFium returns circular bookmarks. (Closed)

Created:
5 years, 2 months ago by Tom Sepez
Modified:
5 years, 2 months ago
Reviewers:
Lei Zhang
CC:
chromium-reviews
Base URL:
https://chromium.googlesource.com/chromium/src.git@master
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

Stack exhaustion if PDFium returns circular bookmarks. Ideally, we'd track this in PDFium, but the API doesn't have a context representing the current "search" onto which to hang a set of visited bookmarks. Alternatively, we could do this in pdfium_engine itself, but it may be hard to tell when a bookmark is the same, since PDFium dutifully cobbles up a new structure each time around. So restrict the depth to prevent the crash. BUG=542403 Committed: https://crrev.com/a60c693cb284a9f96e8a99b8c26f48c7f7217c78 Cr-Commit-Position: refs/heads/master@{#353891}

Patch Set 1 #

Total comments: 2

Patch Set 2 : Depth goes last. #

Unified diffs Side-by-side diffs Delta from patch set Stats (+17 lines, -8 lines) Patch
M pdf/pdfium/pdfium_engine.cc View 1 3 chunks +17 lines, -8 lines 0 comments Download

Messages

Total messages: 10 (3 generated)
Tom Sepez
Lei, for review.
5 years, 2 months ago (2015-10-13 18:55:43 UTC) #2
Lei Zhang
lgtm https://codereview.chromium.org/1401263005/diff/1/pdf/pdfium/pdfium_engine.cc File pdf/pdfium/pdfium_engine.cc (right): https://codereview.chromium.org/1401263005/diff/1/pdf/pdfium/pdfium_engine.cc#newcode547 pdf/pdfium/pdfium_engine.cc:547: pp::VarDictionary TraverseBookmarks(unsigned int depth, nit: Can depth be ...
5 years, 2 months ago (2015-10-13 20:07:57 UTC) #3
Tom Sepez
On 2015/10/13 20:07:57, Lei Zhang wrote: > lgtm > > https://codereview.chromium.org/1401263005/diff/1/pdf/pdfium/pdfium_engine.cc > File pdf/pdfium/pdfium_engine.cc (right): ...
5 years, 2 months ago (2015-10-13 22:03:27 UTC) #4
Lei Zhang
On 2015/10/13 22:03:27, Tom Sepez wrote: > On 2015/10/13 20:07:57, Lei Zhang wrote: > > ...
5 years, 2 months ago (2015-10-13 22:05:38 UTC) #5
commit-bot: I haz the power
CQ is trying da patch. Follow status at https://chromium-cq-status.appspot.com/patch-status/1401263005/20001 View timeline at https://chromium-cq-status.appspot.com/patch-timeline/1401263005/20001
5 years, 2 months ago (2015-10-13 22:13:24 UTC) #8
commit-bot: I haz the power
Committed patchset #2 (id:20001)
5 years, 2 months ago (2015-10-13 23:02:11 UTC) #9
commit-bot: I haz the power
5 years, 2 months ago (2015-10-13 23:03:04 UTC) #10
Message was sent while issue was closed.
Patchset 2 (id:??) landed as
https://crrev.com/a60c693cb284a9f96e8a99b8c26f48c7f7217c78
Cr-Commit-Position: refs/heads/master@{#353891}

Powered by Google App Engine
This is Rietveld 408576698