commit 560714336135d9bf851146ead65a6c68cf4220ed
author Cary Clark <caryclark@skia.org> Tue Jun 19 08:33:52 2018 -0400
committer Skia Commit-Bot <skia-commit-bot@chromium.org> Tue Jun 19 12:58:00 2018 +0000
tree 343cbaf8658979e1a03df0c58b89976134b5fddf
parent f2030783094e502fb74221077a5ee7cb41287fe4

fix fuzzer bugs in pathops

one from clusterfuzz, one from Skia fuzzer

R=kjlubick@google.com
Bug:853938
Change-Id: If456bf45e4d75edecf4e4e8222ddcdaa301455f4
Reviewed-on: https://skia-review.googlesource.com/135701
Commit-Queue: Cary Clark <caryclark@skia.org>
Commit-Queue: Kevin Lubick <kjlubick@google.com>
Auto-Submit: Cary Clark <caryclark@skia.org>
Reviewed-by: Kevin Lubick <kjlubick@google.com>

src/pathops/SkOpSegment.cpp

diff --git a/src/pathops/SkOpSegment.cpp b/src/pathops/SkOpSegment.cpp
index df70034..fd969f6 100644
--- a/src/pathops/SkOpSegment.cpp
+++ b/src/pathops/SkOpSegment.cpp
@@ -768,6 +768,9 @@
     SkOpSegment* nextSegment;
     int activeCount = 0;
     do {
+        if (!nextAngle) {
+            return nullptr;
+        }
         nextSegment = nextAngle->segment();
         ++activeCount;
         if (!foundAngle || (foundDone && activeCount & 1)) {