| commit | 4faa869cdabbdcf4867118b4a1272296baaeeb52 | [log] [tgz] |
|---|---|---|
| author | commit-bot@chromium.org <commit-bot@chromium.org@2bbb7eff-a529-9590-31e7-b0007b416f81> | Tue Nov 05 15:46:56 2013 +0000 |
| committer | commit-bot@chromium.org <commit-bot@chromium.org@2bbb7eff-a529-9590-31e7-b0007b416f81> | Tue Nov 05 15:46:56 2013 +0000 |
| tree | 98283bc90add39d00d98ac4dfde9af051816637a | |
| parent | fedf13d73a6d6f1921ce5f449bb6e34e9d8e14e4 [diff] [blame] |
Checking structure sizes before reading them from memory to avoid overflowing the buffer's stream. BUG= R=reed@google.com, mtklein@google.com, senorblanco@chromium.org Committed: https://code.google.com/p/skia/source/detail?r=12114 Committed: https://code.google.com/p/skia/source/detail?r=12119 Author: sugoi@chromium.org Review URL: https://codereview.chromium.org/41253002 git-svn-id: http://skia.googlecode.com/svn/trunk@12130 2bbb7eff-a529-9590-31e7-b0007b416f81
diff --git a/samplecode/SampleRegion.cpp b/samplecode/SampleRegion.cpp index 1bd3162..39c27a8 100644 --- a/samplecode/SampleRegion.cpp +++ b/samplecode/SampleRegion.cpp
@@ -280,7 +280,7 @@ SkASSERT(size == size2); SkRegion tmp3; - SkDEBUGCODE(size2 = ) tmp3.readFromMemory(buffer); + SkDEBUGCODE(size2 = ) tmp3.readFromMemory(buffer, 1000); SkASSERT(size == size2); SkASSERT(tmp3 == tmp);