diff options
| author |  Mike Reed <reed@google.com> | 2017-07-26 17:33:44 -0400 |
|---|---|---|
| committer |  Skia Commit-Bot <skia-commit-bot@chromium.org> | 2017-07-27 12:15:03 +0000 |
| commit | 41a930f85bc3988cfbb47a902b03a9830f8149bb (patch) | |
| tree | d912d3e1f69ce84cce68199e172e9538d97f49c9 /src/sksl/ir/SkSLForStatement.h | |
| parent | 6cd51b51d6603a3100b147c45f38697f2f199fc6 (diff) | |
Revert "Revert "Fix SkPathRef deserialization malloc crash""
This reverts commit a4ce4b1f6bef22e7ca5c7a952197fc2bc70923fc.
Fix SkPathRef deserialization malloc crash
If the path says it has more points/verbs/etc than the buffer could
be holding, then resetToSize could try to allocate something huge
and crash.
Bug: skia:
Change-Id: I23b8870e9f74386aca89fb8f9a60d3b452044094
Reviewed-on: https://skia-review.googlesource.com/26805
Commit-Queue: Mike Klein <mtklein@chromium.org>
Reviewed-by: Mike Klein <mtklein@chromium.org>
Diffstat (limited to 'src/sksl/ir/SkSLForStatement.h')
0 files changed, 0 insertions, 0 deletions