diff options
| author | isherman@chromium.org <isherman@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-07-09 01:34:15 +0000 |
|---|---|---|
| committer | isherman@chromium.org <isherman@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | 2013-07-09 01:34:15 +0000 |
| commit | 0a4a15ed64a904954543b0a2ba5a65996ba127cb (patch) | |
| tree | ae43a77a1893c64d95dbfa26c9f812ba7c4a5670 /components | |
| parent | 208d1c693167aea42e71202a0d3337403ac50145 (diff) | |
| download | chromium_src-0a4a15ed64a904954543b0a2ba5a65996ba127cb.zip chromium_src-0a4a15ed64a904954543b0a2ba5a65996ba127cb.tar.gz chromium_src-0a4a15ed64a904954543b0a2ba5a65996ba127cb.tar.bz2 | |
[Autofill] Fix a heap-buffer-overflow in autofill::AutofillQueryXmlParser::CharacterData
BUG=256633
TEST=none
R=estade@chromium.org
Review URL: https://chromiumcodereview.appspot.com/18649005
git-svn-id: svn://svn.chromium.org/chrome/trunk/src@210487 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'components')
| -rw-r--r-- | components/autofill/core/browser/autofill_xml_parser.cc | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/components/autofill/core/browser/autofill_xml_parser.cc b/components/autofill/core/browser/autofill_xml_parser.cc index 4b744f6..83d9958 100644 --- a/components/autofill/core/browser/autofill_xml_parser.cc +++ b/components/autofill/core/browser/autofill_xml_parser.cc @@ -196,7 +196,7 @@ void AutofillQueryXmlParser::CharacterData( return; int type = -1; - base::StringToInt(text, &type); + base::StringToInt(std::string(text, len), &type); if (type >= AUTOCHECKOUT_STEP_MIN_VALUE && type <= AUTOCHECKOUT_STEP_MAX_VALUE) { AutocheckoutStepType step_type = |