Google Git
Sign in
skia / skia / eb82b5a3ee917654de6a60907e40ed8d3ef3d739
commiteb82b5a3ee917654de6a60907e40ed8d3ef3d739[log] [tgz]
authorCary Clark <caryclark@skia.org>Fri Dec 14 10:15:13 2018 -0500
committerSkia Commit-Bot <skia-commit-bot@chromium.org>Fri Dec 14 15:40:39 2018 +0000
treeed1d2a220841028cba7fff6b61c7afe6c1e0efc1
parentaf67819ee1d93fc4000c1ad777ce53ec87dc693a [diff]
protect against fuzz generated fLastMoveToIndex

If fLastMoveToIndex exceeds SkPath::countPoints(),
SkPath::internalGetConvexity() reads outside allocated
memory.

R=kjlubick@google.com

Bug: skia:11842
Change-Id: Iba20c1a977645d882f0b86c22134d1d055692a0c
Reviewed-on: https://skia-review.googlesource.com/c/177801
Commit-Queue: Cary Clark <caryclark@skia.org>
Commit-Queue: Kevin Lubick <kjlubick@google.com>
Auto-Submit: Cary Clark <caryclark@skia.org>
Reviewed-by: Kevin Lubick <kjlubick@google.com>
1 file changed
tree: ed1d2a220841028cba7fff6b61c7afe6c1e0efc1
  1. animations/
  2. bench/
  3. bin/
  4. dm/
  5. docker/
  6. docs/
  7. example/
  8. experimental/
  9. fuzz/
  10. gm/
  11. gn/
  12. include/
  13. infra/
  14. modules/
  15. platform_tools/
  16. resources/
  17. samplecode/
  18. site/
  19. src/
  20. tests/
  21. third_party/
  22. tools/
  23. .clang-format
  24. .clang-tidy
  25. .gitignore
  26. .gn
  27. AUTHORS
  28. BUILD.gn
  29. codereview.settings
  30. CONTRIBUTING
  31. CQ_COMMITTERS
  32. DEPS
  33. Doxyfile
  34. LICENSE
  35. OWNERS
  36. PRESUBMIT.py
  37. public.bzl
  38. README
  39. README.chromium
  40. whitespace.txt