diff options
| author | Johannes Hofmann <Johannes.Hofmann@gmx.de> | 2010-10-15 22:26:14 +0200 |
|---|---|---|
| committer | Johannes Hofmann <Johannes.Hofmann@gmx.de> | 2010-10-15 22:26:14 +0200 |
| commit | 4212c27815f8cf5c8bc51fb5b8643fc420c47473 (patch) | |
| tree | fe0ce13264a76c3489e841537ac46f8f7b728466 /src/html.cc | |
| parent | 21d55d46536fcd702a5ae742554e8d353ba64cf9 (diff) | |
avoid integer overflow in Polygon::linesCross0()
The product of the two zOfVectorProduct() values could overflow.
Check both values for different sign instead.
Testcase:
<html> <body>
<img src="doesnt_matter.gif" width="250" height="700" usemap="#themap">
<map name="themap">
<area shape="poly" coords="1,250, 245,270, 223,513"
href="http://www.dillo.org">
</map>
</body> </html>
Reported-by and Testcase-by: corvid <corvid@lavabit.com>
Diffstat (limited to 'src/html.cc')
0 files changed, 0 insertions, 0 deletions