Fix mask applied to SkPath::fFillType to fix fuzzer bug

src/core/SkPath.cpp

 /*
  * Copyright 2006 The Android Open Source Project
  *
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 #include <cmath>
 #include "SkBuffer.h"
 #include "SkCubicClipper.h"
@@ skipping 2040 matching lines @@
     if (!buffer.readS32(&packed)) {
         return 0;
     }
 
     unsigned version = packed & 0xFF;
     if (version >= kPathPrivLastMoveToIndex_Version && !buffer.readS32(&fLastMoveToIndex)) {
         return 0;
     }
 
     fConvexity = (packed >> kConvexity_SerializationShift) & 0xFF;
-    fFillType = (packed >> kFillType_SerializationShift) & 0xFF;
+    fFillType = (packed >> kFillType_SerializationShift) & 0x3;
     uint8_t dir = (packed >> kDirection_SerializationShift) & 0x3;
     fIsVolatile = (packed >> kIsVolatile_SerializationShift) & 0x1;
     SkPathRef* pathRef = SkPathRef::CreateFromBuffer(&buffer);
     if (!pathRef) {
         return 0;
     }
 
     fPathRef.reset(pathRef);
     SkDEBUGCODE(this->validate();)
     buffer.skipToAlign4();
@@ skipping 1291 matching lines @@
         *direction = SkPath::kCW_Direction;
         *start = firstDir;
     } else {
         SkASSERT(((secondDir + 1) & 0b11) == firstDir);
         *direction = SkPath::kCCW_Direction;
         *start = secondDir;
     }
     *rect = tempRect;
     return true;
 }