commit | 548d387ab935349edd03149502fff8ebe467b5b0 | [log] [tgz] |
---|---|---|
author | Mike Klein <mtklein@chromium.org> | Wed Jan 24 15:36:35 2018 -0500 |
committer | Skia Commit-Bot <skia-commit-bot@chromium.org> | Wed Jan 24 21:39:00 2018 +0000 |
tree | fbf99e52dc4327b9197e5bc67688277293851e41 | |
parent | 678f6b1a55a9b50becc3b84ea971ab55638d478d [diff] |
Keep SkRasterPipelineSpriteBlitter's src/dst offset math in size_t With big enough y and stride (e.g. 27 and ~20000000) the expression - bpp*x - bpp*y*fSrcPtr.stride can underflow, and cause mayhem. Bug: chromium:797796 Change-Id: Ifc412230c4c7eadfcd36446113be9ac1753b5b1c Reviewed-on: https://skia-review.googlesource.com/99343 Reviewed-by: Mike Reed <reed@google.com> Commit-Queue: Mike Klein <mtklein@chromium.org>