Integer overflow in fx_basic.h and fx_memory.h

core/include/fxcrt/fx_basic.h

 // Copyright 2014 PDFium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
  
 // Original code copyright 2014 Foxit Software Inc. http://www.foxitsoftware.com
 
 #ifndef _FX_BASIC_H_
 #define _FX_BASIC_H_
+#ifndef _STDINT_H_ 
+#define _STDINT_H_
+#include <stdint.h>
+#endif
 #ifndef _FX_SYSTEM_H_
 #include "fx_system.h"
 #endif
 #ifndef _FX_MEMORY_H_
 #include "fx_memory.h"
 #endif
 #ifndef _FX_STRING_H_
 #include "fx_string.h"
 #endif
 #ifndef _FX_STREAM_H_
 #include "fx_stream.h"
 #endif
+ 
 class CFX_BinaryBuf : public CFX_Object
 {
 public:
 
     CFX_BinaryBuf(IFX_Allocator* pAllocator = NULL);
 
     CFX_BinaryBuf(FX_STRSIZE size, IFX_Allocator* pAllocator = NULL);
 
     ~CFX_BinaryBuf();
 
@@ skipping 738 matching lines @@
         : m_pAllocator(pAllocator)
         , m_pData(NULL)
     {}
     CFX_FixedBufGrow(int data_size, IFX_Allocator* pAllocator = NULL)
         : m_pAllocator(pAllocator)
         , m_pData(NULL)
     {
         if (data_size > FixedSize) {
             m_pData = FX_Allocator_Alloc(m_pAllocator, DataType, data_size);
         } else {
+            if (FixedSize > SIZE_MAX/sizeof(DataType))
+                return;
+
             FXSYS_memset32(m_Data, 0, sizeof(DataType)*FixedSize);
         }
     }
     void SetDataSize(int data_size)
     {
         if (m_pData) {
             FX_Allocator_Free(m_pAllocator, m_pData);
         }
         m_pData = NULL;
         if (data_size > FixedSize) {
             m_pData = FX_Allocator_Alloc(m_pAllocator, DataType, data_size);
         } else {
+
+            if (FixedSize > SIZE_MAX/sizeof(DataType))
+                return;
+
             FXSYS_memset32(m_Data, 0, sizeof(DataType)*FixedSize);
         }
     }
     ~CFX_FixedBufGrow()
     {
         if (m_pData) {
             FX_Allocator_Free(m_pAllocator, m_pData);
         }
     }
     operator DataType*()
@@ skipping 832 matching lines @@
     Ready,
     ToBeContinued,
     Found,
     NotFound,
     Failed,
     Done
 } FX_ProgressiveStatus;
 #define ProgressiveStatus       FX_ProgressiveStatus
 #define FX_NAMESPACE_DECLARE(namespace, type)       namespace::type
 #endif