tree 74f730c5d2d67e68a612aed6e97411b429a4a202
parent 3f197528d4753af1827a78760853cf72dbc6a001
author Tom Sepez <tsepez@chromium.org> 1712884220 +0000
committer Pdfium LUCI CQ <pdfium-scoped@luci-project-accounts.iam.gserviceaccount.com> 1712884220 +0000

Don't allow two-arg span constructor without UNSAFE_BUFFER() annotation.

There isn't any reason to trust a programmer-provided length vs.
those deduced by the compiler.

This brings PDFium's copy of span more into line with what base
has already done.

This CL turns on enforcement after previous CLs have made the code
clean to do so, i.e.
    https://pdfium-review.googlesource.com/c/pdfium/+/118250

and its follow-ons.

Change-Id: Ieace1fb4991b57bddf697bf24b1b7570200dcb6a
Reviewed-on: https://pdfium-review.googlesource.com/c/pdfium/+/118272
Commit-Queue: Tom Sepez <tsepez@chromium.org>
Reviewed-by: Thomas Sepez <tsepez@google.com>
Reviewed-by: Lei Zhang <thestig@chromium.org>