SIGN IN SIGN UP

Fix crash vulnerabilities in path animation and layer parent handling

Two stability issues have been addressed:

1. PathData specialization: Added missing empty-frames guard in the
   Property<PathData>::value() method at lottiemodel.h. This prevents
   a null pointer dereference when animation keyframes are discarded
   during parsing, leaving the frames array empty.

2. Layer parent recursion: Added depth limiting to Layer::matrix() at
   lottieitem.cpp to prevent stack overflow from cyclic parent layer
   references. The method now uses an internal overload with a depth
   counter that returns an identity matrix when exceeding 64 levels.

Files changed:
  - src/lottie/lottiemodel.h: Added empty check before accessing frames
  - src/lottie/lottieitem.h: Declared overloaded matrix() with depth param
  - src/lottie/lottieitem.cpp: Implemented depth-limited matrix traversal
M
Michal Szczecinski committed
bf689b72b8482c5ea674235854bd11b6d1b42588
Parent: 729e5d0
Committed by JoogabYun <40262755+JoogabYun@users.noreply.github.com> on 6/5/2026, 5:00:58 AM