tree 78dc84204e7e9cec0eaeeafaa1b0865bbbdd91e4
parent e21f0ec04e9886ca86af1ad47bcbbf367ab6858b
author Khushal <khushalsagar@chromium.org> 1534464611 -0700
committer Skia Commit-Bot <skia-commit-bot@chromium.org> 1534467111 +0000

fonts: Fix UAF bug in SkRemoteGlyphCache.

No reference to memory allocated from the serializer should be retained
after another allocation is made, since the vector can internally
realloc. In the case where a glyph is tooLargeForAtlas, we serialize the
path and still access the glyph after it, which could result in a UAF
bug.

R=mtklein@google.com

Bug: 874740
Change-Id: I33c048c154e53b89d68acd02d68718d7ec7b2388
Reviewed-on: https://skia-review.googlesource.com/147824
Commit-Queue: Mike Klein <mtklein@google.com>
Reviewed-by: Mike Klein <mtklein@google.com>