Skia / Firefox SkTDArray Integer Overflow

Skia and Firefox suffer from an issue where an integer overflow in SkTDArray can lead to an out-of-bounds write.

Leave a Reply