Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(131)

Unified Diff: core/src/fxcrt/fx_basic_gcc.cpp

Issue 524443002: Fix a bug when assign the generation number of indirect objects (Closed) Base URL: https://pdfium.googlesource.com/pdfium.git@master
Patch Set: Change real_objnum to parser_objnum, check StrToInt overflow Created 6 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « core/src/fpdfapi/fpdf_parser/fpdf_parser_parser.cpp ('k') | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: core/src/fxcrt/fx_basic_gcc.cpp
diff --git a/core/src/fxcrt/fx_basic_gcc.cpp b/core/src/fxcrt/fx_basic_gcc.cpp
index 7f5bbade66c38d188171c9b9b701e2dbc969eb98..0390132d31763a2dafde902be93e0a2ac18e46da 100644
--- a/core/src/fxcrt/fx_basic_gcc.cpp
+++ b/core/src/fxcrt/fx_basic_gcc.cpp
@@ -17,11 +17,16 @@ T FXSYS_StrToInt(STR_T str)
str ++;
}
T num = 0;
+ T num_new = 0;
while (*str) {
if ((*str) < '0' || (*str) > '9') {
break;
}
- num = num * 10 + (*str) - '0';
+ num_new = num * 10 + (*str) - '0';
+ if (num_new < 0) {
+ break;
Bo Xu 2014/09/19 21:48:19 Now check when the string is too long and overflow
Tom Sepez 2014/09/19 22:15:38 This can't work, either T is a signed type in whic
Bo Xu 2014/09/19 22:28:15 Done.
+ }
+ num = num_new;
str ++;
}
return neg ? -num : num;
« no previous file with comments | « core/src/fpdfapi/fpdf_parser/fpdf_parser_parser.cpp ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698