DescriptionFixing possible out of bound memory access
This was a bug found by ASAN. When width is very small, we can have something like width == 1 and rowBytes == 8. Using "2 * yWidth" (2) would be smaller than rowBytesY (8), so we could read memory out of bounds. This issue has a separate fix in blink (crbug.com/458861).
BUG=skia:
Committed: https://skia.googlesource.com/skia/+/f421ec6cc9c8f32d717b9b1df71fd9e79817a16c
Patch Set 1 #
Messages
Total messages: 6 (2 generated)
|