tree c0a3ad240d38759a1d3e0bf9d20b3fe4ebdca5e2
parent 4761770b945f7ef4ac748e31b85e00b4d0fc6593
author Tom Sepez <tsepez@chromium.org> 1548280626 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1548280626 +0000

Don't trust CJX_Objects handed back from JavaScript.

Implement our own dynamic typing to ensure we are not making
bad casts since we don't have RTTI. There are too many ways
that JS can apply methods/getter to objects that this provides
another line of defense.

Put all the type information constants into the header so that
they can be easily checked against the actual class hierarchy.
The changes to the .cpp files should all be boilerplate, except
for CJX_Object, which has no superclass.

Apply the check inside the jse_define.h macros before making cast.

Bug: chromium:922864
Change-Id: I4d5faf572949a72168b39d43d33eea22659194b1
Reviewed-on: https://pdfium-review.googlesource.com/c/48650
Commit-Queue: Tom Sepez <tsepez@chromium.org>
Reviewed-by: Lei Zhang <thestig@chromium.org>