commit 0cc0399b6bc9044942db282514fba42b5d2a1d09
author Mathias Agopian <mathias@google.com> Fri Oct 29 15:14:08 2010 -0700
committer Mathias Agopian <mathias@google.com> Fri Oct 29 15:14:08 2010 -0700
tree eda6d7ee3e81f37ce75a3a18279e34aaa9912a4e
parent 067ed474052a267785a79111c2b3a14e3eae37ee

fix [3148312] Region can access data out of bounds

Change-Id: Ic46f31d40943f405e37da21a50b55edd5a2c4124

libs/ui/Region.cpp

diff --git a/libs/ui/Region.cpp b/libs/ui/Region.cpp
index 12db908..1994f6a 100644
--- a/libs/ui/Region.cpp
+++ b/libs/ui/Region.cpp
@@ -289,7 +289,7 @@
     void flushSpan() {
         bool merge = false;
         if (tail-head == ssize_t(span.size())) {
-            Rect const* p = cur;
+            Rect const* p = span.editArray();
             Rect const* q = head;
             if (p->top == q->bottom) {
                 merge = true;