tree b85d9996d1f203b3edd8f95603709af77a8d18e1
parent 2a2ee0f1ca747929acaf1b4f2eadbf7c8e8025e6
author Nicolas Pena <npm@chromium.org> 1494520428 -0400
committer Chromium commit bot <commit-bot@chromium.org> 1494521395 +0000

Stop rendering if a span length overflowed in AGG

In AGG, len is of type coord_type, which we have as int16_t, but we can add to
it large values, causing it to become negative. Stop the rendering when that
occurs.

Bug: chromium:719258
Change-Id: Ic7497666b01220a9cd3e7d749f1fc6ae4a210870
Reviewed-on: https://pdfium-review.googlesource.com/5370
Reviewed-by: dsinclair <dsinclair@chromium.org>
Commit-Queue: Nicolás Peña <npm@chromium.org>