diff options
| author |  commit-bot@chromium.org <commit-bot@chromium.org@2bbb7eff-a529-9590-31e7-b0007b416f81> | 2013-12-30 15:48:10 +0000 |
|---|---|---|
| committer | commit-bot@chromium.org <commit-bot@chromium.org@2bbb7eff-a529-9590-31e7-b0007b416f81> | 2013-12-30 15:48:10 +0000 |
| commit | fbd9b17711e6f86853f1c5fdb76efce1b9f52bd1 (patch) | |
| tree | 5532c3ba7ae796b418f228bdf035d22132a451e1 /gm/vertices.cpp | |
| parent | 57212f9469c8056bab3c85243dbb904e386eab95 (diff) | |
Fixing crash found by fuzzer
A previous fix only partially fixed this issue by adding validation on some inputs of SkImageInfo. If anything invalid is detected in SkImageInfo, unfortunately, this can cause getSafeSize() to do an illegal memory access while calling bytesPerPixel(), which could have a bad color type at this point.
A possible fix is to simply make sure we are in a valid state before calling getSafeSize().
BUG=329254
R=reed@google.com, mtklein@google.com, bsalomon@google.com, sugoi@google.com
Author: sugoi@chromium.org
Review URL: https://codereview.chromium.org/107003006
git-svn-id: http://skia.googlecode.com/svn/trunk@12844 2bbb7eff-a529-9590-31e7-b0007b416f81
Diffstat (limited to 'gm/vertices.cpp')
0 files changed, 0 insertions, 0 deletions