diff options
| author | Mathias Agopian <mathias@google.com> | 2010-10-29 15:14:08 -0700 |
|---|---|---|
| committer | Mathias Agopian <mathias@google.com> | 2010-10-29 15:14:08 -0700 |
| commit | 0cc0399b6bc9044942db282514fba42b5d2a1d09 (patch) | |
| tree | eda6d7ee3e81f37ce75a3a18279e34aaa9912a4e /libs | |
| parent | 067ed474052a267785a79111c2b3a14e3eae37ee (diff) | |
| download | frameworks_native-0cc0399b6bc9044942db282514fba42b5d2a1d09.zip frameworks_native-0cc0399b6bc9044942db282514fba42b5d2a1d09.tar.gz frameworks_native-0cc0399b6bc9044942db282514fba42b5d2a1d09.tar.bz2 | |
fix [3148312] Region can access data out of bounds
Change-Id: Ic46f31d40943f405e37da21a50b55edd5a2c4124
Diffstat (limited to 'libs')
| -rw-r--r-- | libs/ui/Region.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/libs/ui/Region.cpp b/libs/ui/Region.cpp index 12db908..1994f6a 100644 --- a/libs/ui/Region.cpp +++ b/libs/ui/Region.cpp @@ -289,7 +289,7 @@ private: void flushSpan() { bool merge = false; if (tail-head == ssize_t(span.size())) { - Rect const* p = cur; + Rect const* p = span.editArray(); Rect const* q = head; if (p->top == q->bottom) { merge = true; |