diff options
| author |  caryclark <caryclark@google.com> | 2014-08-20 08:11:24 -0700 |
|---|---|---|
| committer |  Commit bot <commit-bot@chromium.org> | 2014-08-20 08:11:24 -0700 |
| commit | bdbb2422b9f20372597367a032d822b4297eab41 (patch) | |
| tree | 72eab028c60403283303f8fb2be3a58aab55c31c /experimental/expectations | |
| parent | c551d9fcae98ff7b9d56f315947e89a26632aeec (diff) | |
copy points in array that may stretch
Description:
Potential SkOpSegment::addT() use-after-free
The 'pt' arg can be a reference to a point stored in the local fTs
TDArray => appending may cause a realloc and leave the reference
pointing to deallocated mem.
Copy the points from the stretchy array before adding them.
R=fmalita@google.com, fmalita@chromium.org, fmalita
BUG=405417
Author: caryclark@google.com
Review URL: https://codereview.chromium.org/489853002
Diffstat (limited to 'experimental/expectations')
0 files changed, 0 insertions, 0 deletions