summaryrefslogtreecommitdiffstats
path: root/chrome_frame/chrome_frame_activex.cc
diff options
context:
space:
mode:
authorscherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-06-08 01:01:58 +0000
committerscherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2010-06-08 01:01:58 +0000
commitb04cfb5ac972b460323dba7e3e79105ee44b491a (patch)
treef64fa6d8dc686524c14b07d4e7fad8d4713e7cb8 /chrome_frame/chrome_frame_activex.cc
parent7d60fb28dd7f2b2f46b2f5cd55f721245965faf1 (diff)
downloadchromium_src-b04cfb5ac972b460323dba7e3e79105ee44b491a.zip
chromium_src-b04cfb5ac972b460323dba7e3e79105ee44b491a.tar.gz
chromium_src-b04cfb5ac972b460323dba7e3e79105ee44b491a.tar.bz2
Added check for negative height/width and ensure that buffer size has not changed before reading buffers.
Patch by cdn@chromium.org: http://codereview.chromium.org/2479002/show BUG=43322 TEST=Run with --enable-video-layering and --enable-gpu-rendering and use <video> tag git-svn-id: svn://svn.chromium.org/chrome/trunk/src@49132 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'chrome_frame/chrome_frame_activex.cc')
0 files changed, 0 insertions, 0 deletions