| commit | 548d387ab935349edd03149502fff8ebe467b5b0 | [log] [tgz] |
|---|---|---|
| author | Mike Klein <mtklein@chromium.org> | Wed Jan 24 15:36:35 2018 -0500 |
| committer | Skia Commit-Bot <skia-commit-bot@chromium.org> | Wed Jan 24 21:39:00 2018 +0000 |
| tree | fbf99e52dc4327b9197e5bc67688277293851e41 | |
| parent | 678f6b1a55a9b50becc3b84ea971ab55638d478d [diff] |
Keep SkRasterPipelineSpriteBlitter's src/dst offset math in size_t
With big enough y and stride (e.g. 27 and ~20000000) the expression
- bpp*x - bpp*y*fSrcPtr.stride
can underflow, and cause mayhem.
Bug: chromium:797796
Change-Id: Ifc412230c4c7eadfcd36446113be9ac1753b5b1c
Reviewed-on: https://skia-review.googlesource.com/99343
Reviewed-by: Mike Reed <reed@google.com>
Commit-Queue: Mike Klein <mtklein@chromium.org>