ensureBuffer can modify this.buffer, so read it after ensureBuffer

diff --git a/pdf.js b/pdf.js
index a6dedb7d521b5a3891f5494ccdd222593e25537f..b53829abb46e3eda13a1cf95dd3eb4b226c8a60e 100644 (file)
--- a/pdf.js
+++ b/pdf.js
@@ -671,9 +671,9 @@ var PredictorStream = (function() {
         var predictor = this.stream.getByte();
         var rawBytes = this.stream.getBytes(rowBytes);
 
-        var buffer = this.buffer;
         var bufferLength = this.bufferLength;
         this.ensureBuffer(bufferLength + pixBytes);
+        var buffer = this.buffer;
 
         var currentRow = buffer.subarray(bufferLength, bufferLength + rowBytes);
         var prevRow = buffer.subarray(bufferLength - rowBytes, bufferLength);