Index: Source/WebCore/platform/graphics/skia/ImageBufferSkia.cpp |
=================================================================== |
--- Source/WebCore/platform/graphics/skia/ImageBufferSkia.cpp (revision 88849) |
+++ Source/WebCore/platform/graphics/skia/ImageBufferSkia.cpp (working copy) |
@@ -168,6 +168,10 @@ |
PassRefPtr<ByteArray> getImageData(const IntRect& rect, SkDevice& srcDevice, |
const IntSize& size) |
{ |
+ float area = 4.0f * rect.width() * rect.height(); |
+ if (area > static_cast<float>(std::numeric_limits<int>::max())) |
+ return 0; |
+ |
RefPtr<ByteArray> result = ByteArray::create(rect.width() * rect.height() * 4); |
SkBitmap::Config srcConfig = srcDevice.accessBitmap(false).config(); |