• Leon Scroggins III's avatar
    Fix image decoder memory overwrite bug. · f0400173
    Leon Scroggins III authored
    In SkPNGImageDecoder::onDecodeSubset, use png_read_rows to write to
    the scratch memory provided. This is what we should have been doing
    anyway. Further, writing directly to the bitmap can cause writing
    to the wrong memory since the bitmap may not be as big as the
    scratch memory in the case of sampling with a short bitmap.
    
    Cherry-pick of https://codereview.chromium.org/423473003/
    
    BUG:13921093
    Change-Id: Id113453f192257fc674b94c4b76e109fb2599d77
    f0400173
SkImageDecoder_libpng.cpp 46.3 KB