Dan Zivkovic 69c04cadc7 Race condition in cursor move. ... The method WordComposer.moveCursorByAndReturnIfInsideComposingWord() iterates through all the code points in the word that's currently being composed, and it tries to adjust the cursor position by a given amount (left or right). It copies the code points to a new array while processing. But the code point count comes from a member variable. If the member variable changes while the method is processing the copy of the code points, it can run over the length of the code point array. Bug 18876474. Change-Id: Ib3a2d90a4e82b76d381efa774e6b3d6bca99c869		2015-02-27 10:29:47 -08:00
..
android/inputmethod	Race condition in cursor move.	2015-02-27 10:29:47 -08:00