Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1dbbc204 authored by Leon Scroggins III's avatar Leon Scroggins III Committed by Android Git Automerger
Browse files

am 6106f6a4: am 93522968: am 01287549: am 9a6143fa: Handle bad ninepatch data. 

* commit '6106f6a4':
  Handle bad ninepatch data.
parents 98f07d90 6106f6a4

core/jni/android/graphics/NinePatchPeeker.cpp

+3 −1
Original line number Diff line number Diff line
@@ -24,7 +24,9 @@ bool NinePatchPeeker::peek(const char tag[], const void* data, size_t length) { 
    if (strcmp("npTc", tag) == 0 && length >= sizeof(Res_png_9patch)) {

        Res_png_9patch* patch = (Res_png_9patch*) data;

        size_t patchSize = patch->serializedSize();

        assert(length == patchSize);

        if (length != patchSize) {

            return false;

        }

        // You have to copy the data because it is owned by the png reader

        Res_png_9patch* patchNew = (Res_png_9patch*) malloc(patchSize);

        memcpy(patchNew, patch, patchSize);

include/androidfw/ResourceTypes.h

+3 −3
Original line number Diff line number Diff line
@@ -107,9 +107,9 @@ struct Res_png_9patch 
                       yDivs(NULL), colors(NULL) { }



    int8_t wasDeserialized;

    int8_t numXDivs;

    int8_t numYDivs;

    int8_t numColors;

    uint8_t numXDivs;

    uint8_t numYDivs;

    uint8_t numColors;



    // These tell where the next section of a patch starts.

    // For example, the first patch includes the pixels from