Fixing a clusterfuzz found issue
BUG=378175 R=reed@google.com, sugoi@google.com Author: sugoi@chromium.org Review URL: https://codereview.chromium.org/306033003 git-svn-id: http://skia.googlecode.com/svn/trunk@14983 2bbb7eff-a529-9590-31e7-b0007b416f81
This commit is contained in:
parent
facad13fa8
commit
05858435ee
@ -1308,7 +1308,9 @@ bool SkBitmap::ReadRawPixels(SkReadBuffer* buffer, SkBitmap* bitmap) {
|
|||||||
const int height = info.height();
|
const int height = info.height();
|
||||||
const size_t snugSize = snugRB * height;
|
const size_t snugSize = snugRB * height;
|
||||||
const size_t ramSize = ramRB * height;
|
const size_t ramSize = ramRB * height;
|
||||||
SkASSERT(snugSize <= ramSize);
|
if (!buffer->validate(snugSize <= ramSize)) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
char* dst = (char*)sk_malloc_throw(ramSize);
|
char* dst = (char*)sk_malloc_throw(ramSize);
|
||||||
buffer->readByteArray(dst, snugSize);
|
buffer->readByteArray(dst, snugSize);
|
||||||
|
Loading…
Reference in New Issue
Block a user