| commit | 8e85761e5a4a0b169cf101c4d72142ee4b87d266 | [log] [tgz] |
|---|---|---|
| author | sugoi <sugoi@chromium.org> | Mon Feb 09 13:17:21 2015 -0800 |
| committer | Commit bot <commit-bot@chromium.org> | Mon Feb 09 13:17:21 2015 -0800 |
| tree | 60e6c0319819cf4ea0602eae0962231318c86beb | |
| parent | 61adb1b6491db3d3552d09a1c69ba5a37beb38d5 [diff] |
Fixed array read error In 32 bits, if the "element count" was under 32 bits, but "element count" * "element size" was over the 32 bit limit, the overflow was causing the read operation to appear as if it had succeded, even though it should have failed. BUG=456828 Review URL: https://codereview.chromium.org/904833003