commit e06739531b5067564c2ce90c35522c6590162e29
author Mike Reed <reed@google.com> Wed Oct 04 16:46:42 2017 -0400
committer Skia Commit-Bot <skia-commit-bot@chromium.org> Wed Oct 04 21:14:23 2017 +0000
tree 222820f6ffbc172c4b9b63e7ffec51d6b398a983
parent f34b8b1f4e469b0ba8742140b407c5610aae930f

Avoid overflow computing reserve for aaclip

BUG=chromium:713764
Change-Id: I32c95157d5f2b21e9981a07092558a1f6294a463
Reviewed-on: https://skia-review.googlesource.com/55380
Reviewed-by: Ben Wagner <bungeman@google.com>
Commit-Queue: Mike Reed <reed@google.com>

src/core/SkAAClip.cpp

diff --git a/src/core/SkAAClip.cpp b/src/core/SkAAClip.cpp
index 51891c9..c1a39ed 100644
--- a/src/core/SkAAClip.cpp
+++ b/src/core/SkAAClip.cpp
@@ -805,7 +805,7 @@
     SkTDArray<uint8_t> xArray;
 
     yArray.setReserve(SkMin32(bounds.height(), 1024));
-    xArray.setReserve(SkMin32(bounds.width() * 128, 64 * 1024));
+    xArray.setReserve(SkMin32(bounds.width(), 512) * 128);
 
     SkRegion::Iterator iter(rgn);
     int prevRight = 0;