summaryrefslogtreecommitdiffstats
path: root/webkit/plugins
diff options
context:
space:
mode:
authorbrettw@chromium.org <brettw@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2011-07-11 15:27:33 +0000
committerbrettw@chromium.org <brettw@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98>2011-07-11 15:27:33 +0000
commit678bc9b574109f747a0957d42501a6ee56b09c3e (patch)
tree67c73a633d6ddb939674d7b5aebb237760ebf4c8 /webkit/plugins
parente563a9456c981eb07c4bae91eb39b5de3c339900 (diff)
downloadchromium_src-678bc9b574109f747a0957d42501a6ee56b09c3e.zip
chromium_src-678bc9b574109f747a0957d42501a6ee56b09c3e.tar.gz
chromium_src-678bc9b574109f747a0957d42501a6ee56b09c3e.tar.bz2
Properly account for all color channels when checking for overflow in image
creation. BUG=88729 Review URL: http://codereview.chromium.org/7326021 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@92012 0039d316-1c4b-4281-b951-d872f2087c98
Diffstat (limited to 'webkit/plugins')
-rw-r--r--webkit/plugins/ppapi/ppb_image_data_impl.cc2
1 files changed, 1 insertions, 1 deletions
diff --git a/webkit/plugins/ppapi/ppb_image_data_impl.cc b/webkit/plugins/ppapi/ppb_image_data_impl.cc
index 1cc2b42..d565add 100644
--- a/webkit/plugins/ppapi/ppb_image_data_impl.cc
+++ b/webkit/plugins/ppapi/ppb_image_data_impl.cc
@@ -58,7 +58,7 @@ bool PPB_ImageData_Impl::Init(PP_ImageDataFormat format,
return false; // Only support this one format for now.
if (width <= 0 || height <= 0)
return false;
- if (static_cast<int64>(width) * static_cast<int64>(height) >=
+ if (static_cast<int64>(width) * static_cast<int64>(height) * 4 >=
std::numeric_limits<int32>::max())
return false; // Prevent overflow of signed 32-bit ints.