tree 8411f10e4ffe523797682a6dff03d75c4e967789
parent 2632bedb65cdc4c73d1aaad0320dea9d692287d4
author Tom Sepez <tsepez@chromium.org> 1548789507 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1548789507 +0000

Prevent cxfa_contentlayoutitem linked lists from getting entangled.

Implement the basic linked-list primitives, and use them
consistently. Currently the code is doing ad-hoc manipulations
of these pointers, and creating circular lists somewhere. This
causes re-frees as we walk down the list freeing every item.

Use UnownedPtr<> to try to catch any future botches.

Tested against the test case in 925790 (CF fuzzer will subsequently
verify 913564).

Bug: chromium:913564, chromium:925790
Change-Id: I2b735b3137aa715e5bb6b1c4472a1d2fd68ae286
Reviewed-on: https://pdfium-review.googlesource.com/c/49350
Reviewed-by: Lei Zhang <thestig@chromium.org>
Commit-Queue: Tom Sepez <tsepez@chromium.org>