Added bounds checking to GetNameFromTT to handle corrupt files.

Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of
the bounds allocated and passed to GetNameFromTT. There's no reason that
this function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001 (http://crrev.com/1829013002#ps40001)

Committed: https://pdfium.googlesource.com/pdfium/+/676947ce0204914da1d8fb159730432c0fb0a3a2

[Tom Sepez, 2016-03-24 17:37:10]

Description was changed from

==========
Added bounds checking to GetNameFromTT to handle corrupt files. This patch adds
bounds checking to the names buffer passed to GetNameFromTT. There are observed
crashes in this function where data is read outside of the bounds allocated and
passed to GetNameFromTT. There's no reason that this function should ever try
and read outside of the allocated bounds.

BUG=583037

patch by forshaw.
patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)
==========

to

==========
Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of the
bounds allocated and passed to GetNameFromTT. There's no reason that this
function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)
==========

[Tom Sepez, 2016-03-24 17:37:10]

tsepez@chromium.org changed reviewers:
+ forshaw@chromium.org

[Tom Sepez, 2016-03-24 17:37:32]

Description was changed from

==========
Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of the
bounds allocated and passed to GetNameFromTT. There's no reason that this
function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)
==========

to

==========
Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of
the bounds allocated and passed to GetNameFromTT. There's no reason that
this function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)
==========

[Tom Sepez, 2016-03-24 17:38:29]

TBR

[Tom Sepez, 2016-03-24 18:09:49]

Description was changed from

==========
Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of
the bounds allocated and passed to GetNameFromTT. There's no reason that
this function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)
==========

to

==========
Added bounds checking to GetNameFromTT to handle corrupt files. 

Patch by forshaw.

This patch adds bounds checking to the names buffer passed to GetNameFromTT.
There are observed crashes in this function where data is read outside of
the bounds allocated and passed to GetNameFromTT. There's no reason that
this function should ever try and read outside of the allocated bounds.

BUG=583037
TBR=forshaw@chromium.org

patch from issue 1829013002 at patchset 40001
(http://crrev.com/1829013002#ps40001)

Committed:
https://pdfium.googlesource.com/pdfium/+/676947ce0204914da1d8fb159730432c0fb0...
==========

[Tom Sepez, 2016-03-24 18:09:50]

Committed patchset #1 (id:1) manually as
676947ce0204914da1d8fb159730432c0fb0a3a2 (presubmit successful).