| Index: chrome/browser/extensions/extension_browser_actions_api.cc
|
| diff --git a/chrome/browser/extensions/extension_browser_actions_api.cc b/chrome/browser/extensions/extension_browser_actions_api.cc
|
| index d2cb6043abba1b30c23ea1dd32a2db3e29246de4..e7d875e878f93d7488a881cbc8173b3177ac75eb 100644
|
| --- a/chrome/browser/extensions/extension_browser_actions_api.cc
|
| +++ b/chrome/browser/extensions/extension_browser_actions_api.cc
|
| @@ -42,6 +42,7 @@ bool BrowserActionSetIconFunction::RunImpl() {
|
| EXTENSION_FUNCTION_VALIDATE(
|
| static_cast<DictionaryValue*>(args_)->GetInteger(
|
| L"iconIndex", &icon_index));
|
| +
|
| if (icon_index < 0 ||
|
| static_cast<size_t>(icon_index) >=
|
| extension->browser_action()->icon_paths().size()) {
|
|
|