tree d912d3e1f69ce84cce68199e172e9538d97f49c9
parent 6cd51b51d6603a3100b147c45f38697f2f199fc6
author Mike Reed <reed@google.com> 1501104824 -0400
committer Skia Commit-Bot <skia-commit-bot@chromium.org> 1501157703 +0000

Revert "Revert "Fix SkPathRef deserialization malloc crash""

This reverts commit a4ce4b1f6bef22e7ca5c7a952197fc2bc70923fc.

Fix SkPathRef deserialization malloc crash

If the path says it has more points/verbs/etc than the buffer could
be holding, then resetToSize could try to allocate something huge
and crash.

Bug: skia:
Change-Id: I23b8870e9f74386aca89fb8f9a60d3b452044094
Reviewed-on: https://skia-review.googlesource.com/26805
Commit-Queue: Mike Klein <mtklein@chromium.org>
Reviewed-by: Mike Klein <mtklein@chromium.org>