| commit | 8766556dd35a7295e2aef849a3ba33bedaa1106a | [log] [tgz] |
|---|---|---|
| author | cevans@chromium.org <cevans@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Thu Jun 25 16:54:02 2009 |
| committer | cevans@chromium.org <cevans@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Thu Jun 25 16:54:02 2009 |
| tree | 69e7b17f20b8c6c8b69326c1578d94637073cd8e | |
| parent | 638d35291e4a0e5e1ff6275e01296362ce4292be [diff] |
Fix a couple of integer issues in Pickle deserialization. Neither represent a significant risk because the code is not directly exposed to user input. In addition, neither error leads to memory corruption. At worse, there's a C++ exception or abort(). BUG=NONE TEST=PickleTest.EvilLengths Review URL: http://codereview.chromium.org/146121 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@19249 0039d316-1c4b-4281-b951-d872f2087c98