Bug 750625 - crash in nsUrlClassifierPrefixSet::GetPrefixes. r=dcamp

2012-08-15 09:09:53 +02:00
parent b3a25c5ecf
commit ad6180560b
1 changed files with 4 additions and 0 deletions
--- a/toolkit/components/url-classifier/nsUrlClassifierPrefixSet.cpp
+++ b/toolkit/components/url-classifier/nsUrlClassifierPrefixSet.cpp
@@ -225,6 +225,10 @@ nsUrlClassifierPrefixSet::GetPrefixes(PRUint32* aCount,
    PRUint32 start = mIndexStarts[i];
    PRUint32 end = (i == (prefixLength - 1)) ? mDeltas.Length()
                                             : mIndexStarts[i + 1];
+    if (end > mDeltas.Length()) {
+      return NS_ERROR_FILE_CORRUPTED;
+    }
+
    aArray.AppendElement(prefix);
    for (PRUint32 j = start; j < end; j++) {
      prefix += mDeltas[j];