Index: src/effects/SkTableColorFilter.cpp |
diff --git a/src/effects/SkTableColorFilter.cpp b/src/effects/SkTableColorFilter.cpp |
index e15baf69284334681925bce517e71c25abfcc3de..203f0583642c6cd7f2ad4d67599a6870d5da8694 100644 |
--- a/src/effects/SkTableColorFilter.cpp |
+++ b/src/effects/SkTableColorFilter.cpp |
@@ -189,6 +189,7 @@ SkTable_ColorFilter::SkTable_ColorFilter(SkFlattenableReadBuffer& buffer) : INHE |
size_t size = buffer.getArrayCount(); |
SkASSERT(size <= sizeof(storage)); |
+ buffer.validate(size <= sizeof(storage)); |
buffer.readByteArray(storage, size); |
SkDEBUGCODE(size_t raw = ) SkPackBits::Unpack8(storage, size, fStorage); |