Checking structure sizes before reading them from memory to avoid overflowing the buffer's stream.

include/core/SkRegion.h

 
 /*
  * Copyright 2005 The Android Open Source Project
  *
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 
 #ifndef SkRegion_DEFINED
 #define SkRegion_DEFINED
 
 #include "SkRect.h"
 
+class SkFlattenableReadBuffer;
 class SkPath;
 class SkRgnBuilder;
 
 namespace android {
     class Region;
 }
 
 #define SkRegion_gEmptyRunHeadPtr   ((SkRegion::RunHead*)-1)
 #define SkRegion_gRectRunHeadPtr    0
 
@@ skipping 326 matching lines @@
         Spanerator(const SkRegion&, int y, int left, int right);
         bool next(int* left, int* right);
 
     private:
         const SkRegion::RunType* fRuns;
         int     fLeft, fRight;
         bool    fDone;
     };
 
     /**
+     *  Returns the number of bytes of the current object's flattened representation.
+     */
+    uint32_t sizeInMemory() const;
+    /**
+     *  Returns the number of bytes to read.
+     */
+    static uint32_t SizeToRead(SkFlattenableReadBuffer& buffer);
+    /**
      *  Write the region to the buffer, and return the number of bytes written.
      *  If buffer is NULL, it still returns the number of bytes.
      */
     uint32_t writeToMemory(void* buffer) const;
 
     /**
      *  Initialized the region from the buffer, returning the number
      *  of bytes actually read.
      */
     uint32_t readFromMemory(const void* buffer);
@@ skipping 66 matching lines @@
     static bool Oper(const SkRegion&, const SkRegion&, SkRegion::Op, SkRegion*);
 
     friend struct RunHead;
     friend class Iterator;
     friend class Spanerator;
     friend class SkRgnBuilder;
     friend class SkFlatRegion;
 };
 
 #endif