commit ec9db71e002d3205e2dd7c63d6f3b139d43108eb
author John Stiles <johnstiles@google.com> Fri Oct 30 10:52:05 2020 -0400
committer Skia Commit-Bot <skia-commit-bot@chromium.org> Fri Oct 30 15:34:10 2020 +0000
tree 022ab0d5a0e0287e0c72de4fbed5bee6f9bbac89
parent b3058ad5a5d567fc07bca5215317bf73e9036b23

Fix prefix/postfix mixup discovered by fuzzer.

Change-Id: I8b70f456d1a659e46600bbad40b5bcadd08e8edf
Bug: oss-fuzz:26759
Reviewed-on: https://skia-review.googlesource.com/c/skia/+/330743
Commit-Queue: John Stiles <johnstiles@google.com>
Commit-Queue: Ethan Nicholas <ethannicholas@google.com>
Auto-Submit: John Stiles <johnstiles@google.com>
Reviewed-by: Ethan Nicholas <ethannicholas@google.com>

src/sksl/SkSLCFGGenerator.cpp

diff --git a/src/sksl/SkSLCFGGenerator.cpp b/src/sksl/SkSLCFGGenerator.cpp
index 0b1e493..eb88e49c 100644
--- a/src/sksl/SkSLCFGGenerator.cpp
+++ b/src/sksl/SkSLCFGGenerator.cpp
@@ -256,7 +256,7 @@
             return true;
         case Expression::Kind::kPostfix:
             if (!this->tryRemoveExpressionBefore(iter,
-                                                 expr->as<PrefixExpression>().operand().get())) {
+                                                 expr->as<PostfixExpression>().operand().get())) {
                 return false;
             }
             *iter = fNodes.erase(*iter);