Memory allocation for WriteInto is not proper.

pdf/pdfium/pdfium_engine.cc

Index: pdf/pdfium/pdfium_engine.cc
diff --git a/pdf/pdfium/pdfium_engine.cc b/pdf/pdfium/pdfium_engine.cc
index 42f69e7bf2a9bb30154015f0bd2269ff6f0a908b..1b3d138ef317e485c86ade134064cf2ac4bc0643 100644
--- a/pdf/pdfium/pdfium_engine.cc
+++ b/pdf/pdfium/pdfium_engine.cc
@@ -3400,8 +3400,8 @@ bool PDFiumEngineExports::RenderPDFPageToDC(const void* pdf_buffer,
   base::string16 creator;
   size_t buffer_bytes = FPDF_GetMetaText(doc, "Creator", NULL, 0);
   if (buffer_bytes > 1) {
-    FPDF_GetMetaText(doc, "Creator", WriteInto(&creator, buffer_bytes),
-                     buffer_bytes);
+    FPDF_GetMetaText(
+        doc, "Creator", WriteInto(&creator, buffer_bytes), buffer_bytes + 1);

[gene, 2014/09/25 18:18:56]

Are you sure, you are adding +1 in the GetMetaText(), and NOT in WriteInto() ???

[Deepak, 2014/09/26 03:02:38]

Thanks gene for review,After close examination I found that we don't need to
increase the buffer_bytes here, As when we make 

  size_t buffer_bytes = FPDF_GetMetaText(doc, "Creator", NULL, 0);
then it returns me len+2.

And later when we again call 

FPDF_GetMetaText(
        doc, "Creator", WriteInto(&creator, buffer_bytes), buffer_bytes);
Then it copied only len bytes, and keeping last 2 bytes as 0.

I have done changes and raises patch again.
Thanks again.

   }
   bool use_bitmap = false;
   if (StartsWith(creator, L"cairo", false))