Al-Qurtas-Islamic-bank-The-.../src/sfnt
Ben Wagner 335224beee [sfnt] Fix bounds check in SVG.
The `SVG_DOCUMENT_LIST_MINIMUM_SIZE` macro is non trivial and not
protected by parentheses. As a result, the expression
`table_size - SVG_DOCUMENT_LIST_MINIMUM_SIZE` expands to
`table_size - 2U + SVG_DOCUMENT_RECORD_SIZE` instead of the expected
`table_size - (2U + SVG_DOCUMENT_RECORD_SIZE)`. This causes an incorrect
bounds check which may lead to reading past the end of the `SVG ` table.

* src/sfnt/ttsvg.c (tt_face_load_svg): wrap macro definitions in
parentheses.

Bug: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45179
2022-03-03 16:42:54 -05:00
..
module.mk Update all copyright notices. 2022-01-11 10:54:10 +01:00
pngshim.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
pngshim.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
rules.mk Add code to load OT-SVG glyph documents. 2022-01-20 16:45:18 +00:00
sfdriver.c Minor clean-ups. 2022-01-27 22:55:34 -05:00
sfdriver.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
sferrors.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
sfnt.c Add code to load OT-SVG glyph documents. 2022-01-20 16:45:18 +00:00
sfobjs.c Add code to load OT-SVG glyph documents. 2022-01-20 16:45:18 +00:00
sfobjs.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
sfwoff.c Clean-up - do not doubt FT_FREE. 2022-01-30 21:55:21 -05:00
sfwoff.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
sfwoff2.c Clean-up - do not doubt FT_FREE. 2022-01-30 21:55:21 -05:00
sfwoff2.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttbdf.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttbdf.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcmap.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcmap.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcmapc.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcolr.c [sfnt] Fix limit checks for `COLR` v1 ClipBoxes 2022-01-11 13:40:20 +02:00
ttcolr.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcpal.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttcpal.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttkern.c src/sfnt/ttkern.c (tt_face_load_kern): Micro-optimize. 2022-02-19 07:20:24 +01:00
ttkern.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttload.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttload.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttmtx.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttmtx.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttpost.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttpost.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttsbit.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttsbit.h Update all copyright notices. 2022-01-11 10:54:10 +01:00
ttsvg.c [sfnt] Fix bounds check in SVG. 2022-03-03 16:42:54 -05:00
ttsvg.h Add code to load OT-SVG glyph documents. 2022-01-20 16:45:18 +00:00
woff2tags.c Update all copyright notices. 2022-01-11 10:54:10 +01:00
woff2tags.h Update all copyright notices. 2022-01-11 10:54:10 +01:00