Fixed array read error

Fixed array read error

In 32 bits, if the "element count" was under 32 bits, but "element count" * "element size" was over the 32 bit limit, the overflow was causing the read operation to appear as if it had succeded, even though it should have failed.

BUG=456828
Committed: https://skia.googlesource.com/skia/+/8e85761e5a4a0b169cf101c4d72142ee4b87d266

[sugoi1, 2015-02-09 20:37:30]

sugoi@chromium.org changed reviewers:
+ reed@google.com

[sugoi1, 2015-02-09 20:37:31]

Another size_t overflow similar to the other ones fixed recently.

[reed1, 2015-02-09 21:02:00]

lgtm

[sugoi1, 2015-02-09 21:09:47]

The CQ bit was checked by sugoi@chromium.org

[commit-bot: I haz the power, 2015-02-09 21:10:38]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/904833003/1

[commit-bot: I haz the power, 2015-02-09 21:17:24]

Committed patchset #1 (id:1) as
https://skia.googlesource.com/skia/+/8e85761e5a4a0b169cf101c4d72142ee4b87d266