| commit | b04cfb5ac972b460323dba7e3e79105ee44b491a | [log] [tgz] |
|---|---|---|
| author | scherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Tue Jun 08 01:01:58 2010 |
| committer | scherkus@chromium.org <scherkus@chromium.org@0039d316-1c4b-4281-b951-d872f2087c98> | Tue Jun 08 01:01:58 2010 |
| tree | f64fa6d8dc686524c14b07d4e7fad8d4713e7cb8 | |
| parent | 7d60fb28dd7f2b2f46b2f5cd55f721245965faf1 [diff] |
Added check for negative height/width and ensure that buffer size has not changed before reading buffers. Patch by cdn@chromium.org: http://codereview.chromium.org/2479002/show BUG=43322 TEST=Run with --enable-video-layering and --enable-gpu-rendering and use <video> tag git-svn-id: svn://svn.chromium.org/chrome/trunk/src@49132 0039d316-1c4b-4281-b951-d872f2087c98