From 9bf72966ed75353442df205e82b7080fb8a7bb47 Mon Sep 17 00:00:00 2001 From: Werner Lemberg Date: Thu, 14 Dec 2023 06:11:43 +0100 Subject: [PATCH] * src/truetype/ttgxvar.c (ft_var_to_normalized): Fix undefined left-shift. Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63723 --- src/truetype/ttgxvar.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/truetype/ttgxvar.c b/src/truetype/ttgxvar.c index ad4f266b2..78b80782a 100644 --- a/src/truetype/ttgxvar.c +++ b/src/truetype/ttgxvar.c @@ -2141,7 +2141,8 @@ outerIndex, innerIndex ); - v += delta << 2; + /* Convert to 16.16 format before adding. */ + v += delta * 4; /* Clamp value range. */ v = v >= 0x10000L ? 0x10000 : v;