commit 8f633ef2b5f72872d89445fc3ce3981f0e49756d
author John Stiles <johnstiles@google.com> Sat Aug 21 17:13:11 2021 -0400
committer SkCQ <skcq-be@skia-corp.google.com.iam.gserviceaccount.com> Mon Aug 23 14:23:46 2021 +0000
tree d2ba3798e3dc84f6a0eec85b10c998159ff60b87
parent e312532442d152d0f4049559884488f021852ff7

Fix assertion discovered by fuzzer.

We now stop processing a var-declaration if its array-size expression is
invalid. Previously, we'd pass a null array-size expression into
convertVar, which would assert (but would fail cleanly afterwards).

Change-Id: I976f3326e32afbc7045a86d73c0dcb28f418a6f4
Bug: oss-fuzz:37457
Reviewed-on: https://skia-review.googlesource.com/c/skia/+/441079
Auto-Submit: John Stiles <johnstiles@google.com>
Commit-Queue: Brian Osman <brianosman@google.com>
Reviewed-by: Brian Osman <brianosman@google.com>

gn/sksl_tests.gni

diff --git a/gn/sksl_tests.gni b/gn/sksl_tests.gni
index 2c29eab..1aefe93 100644
--- a/gn/sksl_tests.gni
+++ b/gn/sksl_tests.gni
@@ -96,6 +96,7 @@
   "/sksl/errors/Ossfuzz32156.sksl",
   "/sksl/errors/Ossfuzz32587.sksl",
   "/sksl/errors/Ossfuzz32851.sksl",
+  "/sksl/errors/Ossfuzz37457.sksl",
   "/sksl/errors/OverflowFloatLiteral.sksl",
   "/sksl/errors/OverflowIntLiteral.sksl",
   "/sksl/errors/OverflowInt64Literal.sksl",