<html>
<head>
<base href="https://bugs.freedesktop.org/" />
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - reproducible crash with some PDF files"
href="https://bugs.freedesktop.org/show_bug.cgi?id=84555#c6">Comment # 6</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - reproducible crash with some PDF files"
href="https://bugs.freedesktop.org/show_bug.cgi?id=84555">bug 84555</a>
from <span class="vcard"><a class="email" href="mailto:jason@aquaticape.us" title="Jason Crain <jason@aquaticape.us>"> <span class="fn">Jason Crain</span></a>
</span></b>
<pre>Created <span class=""><a href="attachment.cgi?id=111069" name="attach_111069" title="Move array reallocation from visitLine to startLine">attachment 111069</a> <a href="attachment.cgi?id=111069&action=edit" title="Move array reallocation from visitLine to startLine">[details]</a></span> <a href='page.cgi?id=splinter.html&bug=84555&attachment=111069'>[review]</a>
Move array reallocation from visitLine to startLine
If TextSelectionDumper finds exactly 257 lines of text (or probably also 513,
1025, etc) it will write past the end of the lines array without triggering a
reallocation.
Attached patch moves the array size check into TextSelectionDumper::finishLine
so it's always run when an item is added to the lines array.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>