69c04cadc7
The method WordComposer.moveCursorByAndReturnIfInsideComposingWord() iterates through all the code points in the word that's currently being composed, and it tries to adjust the cursor position by a given amount (left or right). It copies the code points to a new array while processing. But the code point count comes from a member variable. If the member variable changes while the method is processing the copy of the code points, it can run over the length of the code point array. Bug 18876474. Change-Id: Ib3a2d90a4e82b76d381efa774e6b3d6bca99c869 |
||
|---|---|---|
| .. | ||
| res | ||
| src/com/android/inputmethod | ||
| Android.mk | ||
| AndroidManifest.xml | ||
| MODULE_LICENSE_APACHE2 | ||
| NOTICE | ||
| proguard.flags | ||