| commit | eb4df8a82281ee9b2490eebc3c2eef8d669deb87 | [log] [tgz] |
|---|---|---|
| author | Siyamed Sinir <siyamed@google.com> | Fri Jun 03 16:22:17 2016 -0700 |
| committer | Siyamed Sinir <siyamed@google.com> | Fri Jun 03 18:11:45 2016 -0700 |
| tree | def4b807c78dce4c38d3983dbd9c065205d522e0 | |
| parent | e34bb5a1ffc5fe35b2fbc58824ad5bfbc7ecad3d [diff] |
Fix int overflow in SpannableStringBuilder.replace During the offset calculation for selection, SpannableStringBuilder had an overflow while multiplying two int values. This CL uses long to calculate the multiplication, and also checks for overflow after casting the final result into int again. Bug: 29108549 Change-Id: I11eff4677916701074b38bc5214730fe704707c4