tree 819c29859af858a2da89373b6cb95ea8783131bb
parent 27e1a74fc2aa1d451035c31ae06f102cb5f0565f
author Tom Sepez <tsepez@chromium.org> 1550275055 +0000
committer Chromium commit bot <commit-bot@chromium.org> 1550275055 +0000

Endless loop in CFGAS_FormatString::FormatStrNum().

Comparison didn't take sign into account, nor the possibility
of CFGAS_Decimal overflowing to 0 (fixing that should be a
separate issue).

Fix another obvious overflow while computing threshold.

Bug: pdfium:1244
Change-Id: Idbbfd311a60b57f83b18ee2fa8af45eeafa877f8
Reviewed-on: https://pdfium-review.googlesource.com/c/50894
Reviewed-by: Lei Zhang <thestig@chromium.org>
Commit-Queue: Tom Sepez <tsepez@chromium.org>