tree 1b91a26a7c8b0762867ea825a145010ab811058b
parent 1e2766188c9e5a9bffe0d739f48ee3d0266cd1bb
author Tom Sepez <tsepez@chromium.org> 1633117576 +0000
committer Pdfium LUCI CQ <pdfium-scoped@luci-project-accounts.iam.gserviceaccount.com> 1633117576 +0000

Update pitch following conversion in CPDF_DIB::GetScanline().

The fuzzer has found a place where we convert a (4bpp x 4comp) scanline
into a (8bpp x 3comp) scanline, but leave the pitch unchanged (2 bytes
per pixel) instead of updating (3 bytes per pixel). Returning a span
based on the smaller size will cause a check.

Bug: chromium:1255011
Test: clusterfuzz to verify.
Change-Id: I2e721b35a11a40a705e2ff9baef956b3ecee6420
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/85590
Reviewed-by: Lei Zhang <thestig@chromium.org>
Commit-Queue: Tom Sepez <tsepez@chromium.org>