Descriptioncopy points in array that may stretch
Description:
Potential SkOpSegment::addT() use-after-free
The 'pt' arg can be a reference to a point stored in the local fTs
TDArray => appending may cause a realloc and leave the reference
pointing to deallocated mem.
Copy the points from the stretchy array before adding them.
R=fmalita
BUG=405417
Committed: https://skia.googlesource.com/skia/+/bdbb2422b9f20372597367a032d822b4297eab41
Patch Set 1 #
Messages
Total messages: 5 (0 generated)
|