ReceiveTempSMS
/
Al-Qurtas-Islamic-bank-The-Best-Bank-in-Iraq
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[truetype] Integer overflow issues. 

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7718

* src/truetype/ttinterp.c (Ins_MIRP): Use ADD_LONG.
This commit is contained in:
Werner Lemberg 2018-04-16 10:39:10 +02:00
parent 939bbee1c0
commit 70ac167c47
2 changed files with 13 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ChangeLog
View File

@ -1,3 +1,13 @@
2018-04-16 Werner Lemberg <wl@gnu.org>
[truetype] Integer overflow issues.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7718
* src/truetype/ttinterp.c (Ins_MIRP): Use ADD_LONG.
2018-04-15 Alexei Podtelezhnikov <apodtele@gmail.com> 2018-04-15 Alexei Podtelezhnikov <apodtele@gmail.com>
[build] Use `info' function of make 3.81. [build] Use `info' function of make 3.81.

2
src/truetype/ttinterp.c
View File

@ -6193,7 +6193,7 @@
minimum_distance = exc->GS.minimum_distance; minimum_distance = exc->GS.minimum_distance;
control_value_cutin = exc->GS.control_value_cutin; control_value_cutin = exc->GS.control_value_cutin;
point = (FT_UShort)args[0]; point = (FT_UShort)args[0];
cvtEntry = (FT_ULong)( args[1] + 1 ); cvtEntry = (FT_ULong)( ADD_LONG( args[1], 1 ) );
#ifdef TT_SUPPORT_SUBPIXEL_HINTING_INFINALITY #ifdef TT_SUPPORT_SUBPIXEL_HINTING_INFINALITY
if ( SUBPIXEL_HINTING_INFINALITY && if ( SUBPIXEL_HINTING_INFINALITY &&