Merge "fix [3148312] Region can access data out of bounds" into gingerbread

libs/ui/Region.cpp

@@ -289,7 +289,7 @@ private:
     void flushSpan() {
         bool merge = false;
         if (tail-head == ssize_t(span.size())) {
-            Rect const* p = cur;
+            Rect const* p = span.editArray();
             Rect const* q = head;
             if (p->top == q->bottom) {
                 merge = true;