commit b44bac50e1412fe34457459904b8784c489d04b6
author Jun Fang <jun_fang@foxitsoftware.com> Tue Jul 15 20:42:53 2014 -0700
committer Jun Fang <jun_fang@foxitsoftware.com> Tue Jul 15 20:42:53 2014 -0700
tree 0c69ead66720b32b1c4dc25095168fe96f44ed9e
parent f86d7d6bd4be27a0aab69c240a6e6a51befca598

Error handling for invalid component number in CPDF_ICCBasedCS::v_Load

BUG=386728
R=palmer@chromium.org

Review URL: https://codereview.chromium.org/397803002

core/src/fpdfapi/fpdf_page/fpdf_page_colors.cpp

diff --git a/core/src/fpdfapi/fpdf_page/fpdf_page_colors.cpp b/core/src/fpdfapi/fpdf_page/fpdf_page_colors.cpp
index 408a553..1cd1097 100644
--- a/core/src/fpdfapi/fpdf_page/fpdf_page_colors.cpp
+++ b/core/src/fpdfapi/fpdf_page/fpdf_page_colors.cpp
@@ -582,7 +582,7 @@
     }
     CPDF_Dictionary* pDict = pStream->GetDict();
     m_nComponents = pDict ? pDict->GetInteger(FX_BSTRC("N")) : 0;
-    if (m_nComponents < 0 || m_nComponents > (1 << 16)) {
+    if (m_nComponents <= 0 || m_nComponents > (1 << 16)) {
         return FALSE;
     }
     CPDF_Array* pRanges = pDict->GetArray(FX_BSTRC("Range"));