Checking structure sizes before reading them from memory to avoid overflowing the buffer's stream.

samplecode/SampleRegion.cpp

 
 /*
  * Copyright 2011 Google Inc.
  *
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 #include "SampleCode.h"
 #include "SkView.h"
 #include "SkCanvas.h"
@@ skipping 262 matching lines @@
             tmp.translate(5, -3);
 
             {
                 char    buffer[1000];
                 SkDEBUGCODE(size_t  size = ) tmp.writeToMemory(NULL);
                 SkASSERT(size <= sizeof(buffer));
                 SkDEBUGCODE(size_t  size2 = ) tmp.writeToMemory(buffer);
                 SkASSERT(size == size2);
 
                 SkRegion    tmp3;
-                SkDEBUGCODE(size2 = ) tmp3.readFromMemory(buffer);
+                SkDEBUGCODE(size2 = ) tmp3.readFromMemory(buffer, 1000);
                 SkASSERT(size == size2);
 
                 SkASSERT(tmp3 == tmp);
             }
 
             rgn.translate(20, 30, &tmp);
             SkASSERT(rgn.isEmpty() || tmp != rgn);
             tmp.translate(-20, -30);
             SkASSERT(tmp == rgn);
         }
@@ skipping 115 matching lines @@
 private:
     SkIRect    fBase, fRect;
 
     typedef SampleView INHERITED;
 };
 
 //////////////////////////////////////////////////////////////////////////////
 
 static SkView* MyFactory() { return new RegionView; }
 static SkViewRegister reg(MyFactory);