diff options
author | Jessica Wagantall <jwagantall@cyngn.com> | 2016-04-05 12:00:34 -0700 |
---|---|---|
committer | Jessica Wagantall <jwagantall@cyngn.com> | 2016-04-05 12:00:34 -0700 |
commit | 2e533e0b14df3dc8f21a76aac66b8f14ab756ca2 (patch) | |
tree | fae80a6b83a3e585c514217d3ccd27b746f20e84 | |
parent | d5ee256d27808e12c16b5eaf288758b2a551b02a (diff) | |
parent | f1e9d0830874f72c910bdb083d2981fc02349bf9 (diff) | |
download | android_frameworks_minikin-2e533e0b14df3dc8f21a76aac66b8f14ab756ca2.tar.gz android_frameworks_minikin-2e533e0b14df3dc8f21a76aac66b8f14ab756ca2.tar.bz2 android_frameworks_minikin-2e533e0b14df3dc8f21a76aac66b8f14ab756ca2.zip |
Merge tag 'android-6.0.1_r24' into HEADstable/cm-13.0-ZNH2KBstable/cm-13.0-ZNH2K
Ticket: CYNGNOS-2213
Android 6.0.1 release 24
-rw-r--r-- | libs/minikin/CmapCoverage.cpp | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/libs/minikin/CmapCoverage.cpp b/libs/minikin/CmapCoverage.cpp index 9f3447e..a4503af 100644 --- a/libs/minikin/CmapCoverage.cpp +++ b/libs/minikin/CmapCoverage.cpp @@ -67,6 +67,7 @@ static bool getCoverageFormat4(vector<uint32_t>& coverage, const uint8_t* data, uint32_t start = readU16(data, kHeaderSize + 2 * (segCount + i)); if (end < start) { // invalid segment range: size must be positive + android_errorWriteLog(0x534e4554, "26413177"); return false; } uint32_t rangeOffset = readU16(data, kHeaderSize + 2 * (3 * segCount + i)); @@ -113,6 +114,7 @@ static bool getCoverageFormat12(vector<uint32_t>& coverage, const uint8_t* data, } uint32_t nGroups = readU32(data, kNGroupsOffset); if (nGroups >= kMaxNGroups || kFirstGroupOffset + nGroups * kGroupSize > size) { + android_errorWriteLog(0x534e4554, "25645298"); return false; } for (uint32_t i = 0; i < nGroups; i++) { @@ -121,6 +123,7 @@ static bool getCoverageFormat12(vector<uint32_t>& coverage, const uint8_t* data, uint32_t end = readU32(data, groupOffset + kEndCharCodeOffset); if (end < start) { // invalid group range: size must be positive + android_errorWriteLog(0x534e4554, "26413177"); return false; } addRange(coverage, start, end + 1); // file is inclusive, vector is exclusive |