tree 69595b565e14a38652035ed103876ef6eb8a2d2c
parent b4be2fb6f3ad5d8654f55d62ea1c77f51f508e33
author Alec Mouri <alecmouri@google.com> 1654888520 +0000
committer Alec Mouri <alecmouri@google.com> 1657741767 +0000

Guard against overflow errors for transparent regions

Applications may send arbitrary transparent regions to SurfaceFlinger
by overriding ViewGroup#gatherTransparentRegion, or a savvy binary may
apply a custom transparent region directly on a transaction. Arbitrary
transparent regions may cause SurfaceFlinger to crash on malformed
input.

We can guard against some of these crashes by constraining the
transparent region to be within the layer bounds

Bug: 230227800
Test: Stress tests
Test: libcompositionengine_test
Change-Id: I38f6f42dce38cdf2f34ba41af658adfdad290417