| commit | bdbb2422b9f20372597367a032d822b4297eab41 | [log] [tgz] |
|---|---|---|
| author | caryclark <caryclark@google.com> | Wed Aug 20 08:11:24 2014 -0700 |
| committer | Commit bot <commit-bot@chromium.org> | Wed Aug 20 08:11:24 2014 -0700 |
| tree | 72eab028c60403283303f8fb2be3a58aab55c31c | |
| parent | c551d9fcae98ff7b9d56f315947e89a26632aeec [diff] |
copy points in array that may stretch Description: Potential SkOpSegment::addT() use-after-free The 'pt' arg can be a reference to a point stored in the local fTs TDArray => appending may cause a realloc and leave the reference pointing to deallocated mem. Copy the points from the stretchy array before adding them. R=fmalita@google.com, fmalita@chromium.org, fmalita BUG=405417 Author: caryclark@google.com Review URL: https://codereview.chromium.org/489853002