Merge to XFA: Add safe FX_Alloc2D() macro

core/src/fpdfapi/fpdf_render/fpdf_render_pattern.cpp

 // Copyright 2014 PDFium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
  
 // Original code copyright 2014 Foxit Software Inc. http://www.foxitsoftware.com
 
 #include "../../../include/fpdfapi/fpdf_render.h"
 #include "../../../include/fpdfapi/fpdf_pageobj.h"
 #include "../../../include/fxge/fx_ge.h"
 #include "../fpdf_page/pageint.h"
@@ skipping 404 matching lines @@
         return;
     }
     int row_verts = pShadingStream->GetDict()->GetInteger("VerticesPerRow");
     if (row_verts < 2) {
         return;
     }
     CPDF_MeshStream stream;
     if (!stream.Load(pShadingStream, pFuncs, nFuncs, pCS)) {
         return;
     }
-    CPDF_MeshVertex* vertex = FX_Alloc(CPDF_MeshVertex, row_verts * 2);
+    CPDF_MeshVertex* vertex = FX_Alloc2D(CPDF_MeshVertex, row_verts, 2);
     if (!stream.GetVertexRow(vertex, row_verts, pObject2Bitmap)) {
         FX_Free(vertex);
         return;
     }
     int last_index = 0;
     while (1) {
         CPDF_MeshVertex* last_row = vertex + last_index * row_verts;
         CPDF_MeshVertex* this_row = vertex + (1 - last_index) * row_verts;
         if (!stream.GetVertexRow(this_row, row_verts, pObject2Bitmap)) {
             FX_Free(vertex);
@@ skipping 667 matching lines @@
         }
     }
     if(bStroke) {
         CPDF_Color& StrokeColor = *pPathObj->m_ColorState.GetStrokeColor();
         if(StrokeColor.m_pCS && StrokeColor.m_pCS->GetFamily() == PDFCS_PATTERN) {
             DrawPathWithPattern(pPathObj, pObj2Device, &StrokeColor, TRUE);
             bStroke = FALSE;
         }
     }
 }