diff options
| author | scherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-06-08 00:56:37 +0000 |
|---|---|---|
| committer | scherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2010-06-08 00:56:37 +0000 |
| commit | 7d60fb28dd7f2b2f46b2f5cd55f721245965faf1 (patch) | |
| tree | ca590a0a89e41c868374cbaf534be40ffee6f2bc /chrome_frame/chrome_frame_activex.cc | |
| parent | 0f6c033419e7fc43dc52f8185446490c9ef3bbdb (diff) | |
| download | chromium_src-7d60fb28dd7f2b2f46b2f5cd55f721245965faf1.zip chromium_src-7d60fb28dd7f2b2f46b2f5cd55f721245965faf1.tar.gz chromium_src-7d60fb28dd7f2b2f46b2f5cd55f721245965faf1.tar.bz2 | |
Add rgb_frame size tracking and resizing to fix security issue with changing sizes.
Added negative checks on signed heights and widths, added negative check for signed heights and widths in backing store for video layering.
Patch by cdn@chromium.org:
http://codereview.chromium.org/2449006/show
BUG=45267
TEST=Run on linux with --enable-video-layering and use <video> tag
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@49131 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome_frame/chrome_frame_activex.cc')
0 files changed, 0 insertions, 0 deletions