minhngoc25a
/
freetype2
mirror of git://git.savannah.gnu.org/freetype/freetype2.git
2
1
Fork 2
Code Issues 4 Releases Wiki Activity

* src/psaux/psintrp.c (cf2_doStems): Fix integer overflow. 

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3510
This commit is contained in:
Werner Lemberg 2017-09-28 14:21:34 +02:00
parent 97cd12657d
commit ec7d2e5f68
2 changed files with 10 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2017-09-28 Werner Lemberg <wl@gnu.org>
* src/psaux/psintrp.c (cf2_doStems): Fix integer overflow.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3510
2017-09-28 Ewald Hew <ewaldhew@gmail.com>
* src/cid/cidgload.c (cid_slot_load_glyph): Fix memory leak.

4
src/psaux/psintrp.c
View File

@ -297,8 +297,8 @@
" No width. Use hsbw/sbw as first op\n" ));
}
if ( !font->isT1 && hasWidthArg && !*haveWidth )
*width = cf2_stack_getReal( opStack, 0 ) +
cf2_getNominalWidthX( font->decoder );
*width = ADD_INT32( cf2_stack_getReal( opStack, 0 ),
cf2_getNominalWidthX( font->decoder ) );
if ( font->decoder->width_only )
goto exit;