tree 244a0e4b80ae31c9459cd73d80bd71b1166bb35e
parent 315f94a0961792ec08428c94105caf3d8637acd1
author Henrique Nakashima <hnakashima@chromium.org> 1532463945 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1532463945 +0000

Fix UAF in CPDFSDK_Widget::GetMixXFAWidget().

Do not allow instanceManager methods to run in Foreground XFA forms.
They are static, and their widgets should not be inserted or removed.

See "XML Forms Architecture (XFA) Specification Version 3.3", page 272.

Bug: chromium:860697
Change-Id: Ia96834e085ee508618ca4dcb2bd5271466369ede
Reviewed-on: https://pdfium-review.googlesource.com/38751
Reviewed-by: Tom Sepez <tsepez@chromium.org>
Commit-Queue: Henrique Nakashima <hnakashima@chromium.org>