| Index: ipc/ipc_message_utils.cc
|
| diff --git a/ipc/ipc_message_utils.cc b/ipc/ipc_message_utils.cc
|
| index 1a7966e8a14610e0df2bc13b412ea7d15a8f056a..e3a3d5e20c720cf6d830ac931e843079ef5fc0b8 100644
|
| --- a/ipc/ipc_message_utils.cc
|
| +++ b/ipc/ipc_message_utils.cc
|
| @@ -568,6 +568,8 @@ bool ParamTraits<std::vector<bool>>::Read(const base::Pickle* m,
|
| // ReadLength() checks for < 0 itself.
|
| if (!iter->ReadLength(&size))
|
| return false;
|
| + if (!IsPickleSizeSufficient<bool>(m, size))
|
| + return false;
|
| r->resize(size);
|
| for (int i = 0; i < size; i++) {
|
| bool value;
|
|
|