tree d56d8a0d58de466830f0a687f6f88947f1e13658
parent 693460a3a7b74d8830a40808684d29876b3c13b9
author Lei Zhang <thestig@chromium.org> 1569415225 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1569415225 +0000

Fix crashes in FPDFClipPath_CountPaths() and friends.

FPDFClipPath_CountPaths(), FPDFClipPath_CountPathSegments(), and
FPDFClipPath_GetPathSegment() all need to verify the FPDF_CLIPPATH
passed in has a reference.

Bug: pdfium:1399
Change-Id: Ib89eff933882e2ccb1736828799547fb9ac0d29b
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/61090
Commit-Queue: dsinclair <dsinclair@chromium.org>
Reviewed-by: dsinclair <dsinclair@chromium.org>