Index: src/ports/SkFontConfigParser_android.cpp |
diff --git a/src/ports/SkFontConfigParser_android.cpp b/src/ports/SkFontConfigParser_android.cpp |
index 3825a7290397adc82ab63caa21899a50a1d34d80..73e4c4773896afa4aaf2f7d59975da5e696557d5 100644 |
--- a/src/ports/SkFontConfigParser_android.cpp |
+++ b/src/ports/SkFontConfigParser_android.cpp |
@@ -14,7 +14,9 @@ |
#include <expat.h> |
#include <dirent.h> |
- |
+#include <stdio.h> |
+ |
+#include <limits> |
#include <stdlib.h> |
#define LMP_SYSTEM_FONTS_FILE "/system/etc/fonts.xml" |
@@ -109,6 +111,32 @@ |
SkTDArray<const TagHandler*> fHandler; // The stack of current tag handlers. |
}; |
+/** Parses a null terminated string into an integer type, checking for overflow. |
+ * http://www.w3.org/TR/html-markup/datatypes.html#common.data.integer.non-negative-def |
+ * |
+ * If the string cannot be parsed into 'value', returns false and does not change 'value'. |
+ */ |
+template <typename T> static bool parse_non_negative_integer(const char* s, T* value) { |
+ SK_COMPILE_ASSERT(std::numeric_limits<T>::is_integer, T_must_be_integer); |
+ const T nMax = std::numeric_limits<T>::max() / 10; |
+ const T dMax = std::numeric_limits<T>::max() - (nMax * 10); |
+ T n = 0; |
+ for (; *s; ++s) { |
+ // Check if digit |
+ if (*s < '0' || '9' < *s) { |
+ return false; |
+ } |
+ int d = *s - '0'; |
+ // Check for overflow |
+ if (n > nMax || (n == nMax && d > dMax)) { |
+ return false; |
+ } |
+ n = (n * 10) + d; |
+ } |
+ *value = n; |
+ return true; |
+} |
+ |
static bool memeq(const char* s1, const char* s2, size_t n1, size_t n2) { |
return n1 == n2 && 0 == memcmp(s1, s2, n1); |
} |
@@ -145,43 +173,6 @@ |
} |
namespace lmpParser { |
- |
-static const TagHandler axisHandler = { |
- /*start*/[](FamilyData* self, const char* tag, const char** attributes) { |
- FontFileInfo& file = *self->fCurrentFontInfo; |
- FontFileInfo::Axis& axis = file.fAxes.push_back(); |
- for (size_t i = 0; ATTS_NON_NULL(attributes, i); i += 2) { |
- const char* name = attributes[i]; |
- const char* value = attributes[i+1]; |
- size_t nameLen = strlen(name); |
- if (MEMEQ("tag", name, nameLen)) { |
- size_t valueLen = strlen(value); |
- if (valueLen == 4) { |
- SkFourByteTag tag = SkSetFourByteTag(value[0], value[1], value[2], value[3]); |
- for (int j = 0; j < file.fAxes.count() - 1; ++j) { |
- if (file.fAxes[j].fTag == tag) { |
- SK_FONTCONFIGPARSER_WARNING("'%c%c%c%c' axis specified more than once", |
- (tag >> 24) & 0xFF, |
- (tag >> 16) & 0xFF, |
- (tag >> 8) & 0xFF, |
- (tag ) & 0xFF); |
- } |
- } |
- axis.fTag = SkSetFourByteTag(value[0], value[1], value[2], value[3]); |
- } else { |
- SK_FONTCONFIGPARSER_WARNING("'%s' is an invalid axis tag", value); |
- } |
- } else if (MEMEQ("stylevalue", name, nameLen)) { |
- if (!parse_fixed<16>(value, &axis.fValue)) { |
- SK_FONTCONFIGPARSER_WARNING("'%s' is an invalid axis stylevalue", value); |
- } |
- } |
- } |
- }, |
- /*end*/NULL, |
- /*tag*/NULL, |
- /*chars*/NULL, |
-}; |
static const TagHandler fontHandler = { |
/*start*/[](FamilyData* self, const char* tag, const char** attributes) { |
@@ -216,13 +207,7 @@ |
/*end*/[](FamilyData* self, const char* tag) { |
trim_string(&self->fCurrentFontInfo->fFileName); |
}, |
- /*tag*/[](FamilyData* self, const char* tag, const char** attributes) -> const TagHandler* { |
- size_t len = strlen(tag); |
- if (MEMEQ("axis", tag, len)) { |
- return &axisHandler; |
- } |
- return NULL; |
- }, |
+ /*tag*/NULL, |
/*chars*/[](void* data, const char* s, int len) { |
FamilyData* self = static_cast<FamilyData*>(data); |
self->fCurrentFontInfo->fFileName.append(s, len); |