Fix use-after-free in CPDF_Color::~CPDF_Color

core/include/fpdfapi/fpdf_resource.h

 // Copyright 2014 PDFium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
  
 // Original code copyright 2014 Foxit Software Inc. http://www.foxitsoftware.com
 
 #ifndef _FPDF_RESOURCE_
 #define _FPDF_RESOURCE_
 #ifndef _FPDF_PARSER_
 #include "fpdf_parser.h"
@@ skipping 712 matching lines @@
     FX_FLOAT*                   m_pBuffer;
 protected:
     void        ReleaseBuffer();
     void        ReleaseColorSpace();
 };
 #define PATTERN_TILING          1
 #define PATTERN_SHADING         2
 class CPDF_Pattern : public CFX_Object
 {
 public:
+   
+    virtual ~CPDF_Pattern();
+    void SaveColor(CPDF_Color* pColor) {m_pColor = pColor;}
 
-    virtual ~CPDF_Pattern() {}
+    CPDF_Object*                m_pPatternObj;
 
-    CPDF_Object*                        m_pPatternObj;
+    int                         m_PatternType;
 
-    int                                         m_PatternType;
+    CFX_AffineMatrix            m_Pattern2Form;
+    CFX_AffineMatrix            m_ParentMatrix;
 
-    CFX_AffineMatrix            m_Pattern2Form;
-    CFX_AffineMatrix            m_ParentMatrix;
-
-    CPDF_Document*                      m_pDocument;
+    CPDF_Document*              m_pDocument;
+    CPDF_Color*                 m_pColor;
 
 protected:
+    
+    CPDF_Pattern(const CFX_AffineMatrix* pParentMatrix);
+};
 
-    CPDF_Pattern(const CFX_AffineMatrix* pParentMatrix)
-    {
-        if (pParentMatrix) {
-            m_ParentMatrix = *pParentMatrix;
-        }
-    }
-};
 class CPDF_TilingPattern : public CPDF_Pattern
 {
 public:
 
     CPDF_TilingPattern(CPDF_Document* pDoc, CPDF_Object* pPatternObj, const CFX_AffineMatrix* parentMatrix);
 
     virtual ~CPDF_TilingPattern();
 
     FX_BOOL                             Load();
 
@@ skipping 187 matching lines @@
     FX_BOOL                                     m_bIsMask;
 
     FX_BOOL                                     m_bInterpolate;
 
     CPDF_Document*                      m_pDocument;
 
     CPDF_Dictionary*            m_pOC;
     CPDF_Dictionary*    InitJPEG(FX_LPBYTE pData, FX_DWORD size);
 };
 #endif