freetype2/src/cff
Werner Lemberg addb2dddb6 [base, cff, truetype] Integer overflows.
Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2060
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2062
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2063
  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2068

* src/base/ftobjs.c (ft_glyphslot_grid_fit_metrics): Use
OVERFLOW_ADD_LONG and OVERFLOW_SUB_LONG.

* src/cff/cf2blues.c (cf2_blues_capture), src/cff/cf2hints.c
(cf2_hintmap_adjustHints): Use OVERFLOW_SUB_INT32.

* src/truetype/ttgload.c (compute_glyph_metrics): User
OVERFLOW_SUB_LONG.

* src/truetype/ttinterp.c (Direct_Move, Direct_Move_Orig,
Direct_Move_X, Direct_Move_Y, Direct_Move_Orig_X,
Direct_Move_Orig_Y, Move_Zp2_Point, Ins_MSIRP): Use
OVERFLOW_ADD_LONG and OVERFLOW_SUB_LONG.
2017-06-03 21:05:42 +02:00
..
Jamfile Update copyright year. 2017-01-04 20:16:34 +01:00
cf2arrst.c Replace `foo == NULL' and `foo != NULL' with `!foo' and `foo', resp. 2016-12-26 17:08:17 +01:00
cf2arrst.h Don't use macro names that contain `__' [1/2]. 2016-01-12 21:37:13 +01:00
cf2blues.c [base, cff, truetype] Integer overflows. 2017-06-03 21:05:42 +02:00
cf2blues.h [cff] s/cf2_floatToFixed/cf2_doubleToFixed/. 2017-05-28 07:46:22 +02:00
cf2error.c Use FT_SET_ERROR where useful. Other minor code formatting. 2016-12-17 20:47:42 +01:00
cf2error.h Typos. 2017-01-19 23:01:44 -05:00
cf2fixed.h [cff] s/cf2_floatToFixed/cf2_doubleToFixed/. 2017-05-28 07:46:22 +02:00
cf2font.c [cff] s/cf2_floatToFixed/cf2_doubleToFixed/. 2017-05-28 07:46:22 +02:00
cf2font.h [cff, truetype] Remove compiler warnings; fix `make multi'. 2016-12-16 11:15:17 +01:00
cf2ft.c [cff] 32bit integer overflow run-time errors 2/2 (#46149). 2017-05-31 16:16:50 +02:00
cf2ft.h [cff] Implement CFF2 support (2/2). 2016-12-15 21:56:44 +01:00
cf2glue.h Don't use macro names that contain `__' [1/2]. 2016-01-12 21:37:13 +01:00
cf2hints.c [base, cff, truetype] Integer overflows. 2017-06-03 21:05:42 +02:00
cf2hints.h Typos. 2016-04-08 23:21:34 -04:00
cf2intrp.c [cff] Even more integer overflows. 2017-06-02 19:24:03 +02:00
cf2intrp.h Don't use macro names that contain `__' [1/2]. 2016-01-12 21:37:13 +01:00
cf2read.c More compiler warning fixes. 2013-06-12 10:58:06 +02:00
cf2read.h Don't use macro names that contain `__' [1/2]. 2016-01-12 21:37:13 +01:00
cf2stack.c Replace `++foo' and `--foo' with `foo++' and `foo--', resp. 2016-12-26 23:57:45 +01:00
cf2stack.h [cff] Implement dynamic stack size for Adobe engine. 2016-12-15 11:22:15 +01:00
cf2types.h Don't use macro names that contain `__' [1/2]. 2016-01-12 21:37:13 +01:00
cff.c Improve `make multi'. 2017-03-18 07:06:49 +01:00
cffcmap.c Update copyright year. 2017-01-04 20:16:34 +01:00
cffcmap.h Update copyright year. 2017-01-04 20:16:34 +01:00
cffdrivr.c [cff] Introduce `random-seed' property (2/2). 2017-02-20 09:01:14 +01:00
cffdrivr.h Update copyright year. 2017-01-04 20:16:34 +01:00
cfferrs.h Update copyright year. 2017-01-04 20:16:34 +01:00
cffgload.c [cff] 32bit integer overflow run-time errors 1/2 (#46149). 2017-05-30 22:35:41 +02:00
cffgload.h Update copyright year. 2017-01-04 20:16:34 +01:00
cffload.c * src/cff/cffload.c (cff_font_load): Improve fix from 2017-01-04. 2017-03-31 09:35:58 +02:00
cffload.h [truetype] Store and use design coordinates also. 2017-03-12 20:46:56 +01:00
cffobjs.c Introduce `FT_Size_InternalRec' structure. 2017-04-22 12:48:50 +02:00
cffobjs.h [cff] Introduce `random-seed' property (1/2). 2017-02-20 08:55:26 +01:00
cffparse.c [cff] 32bit integer overflow run-time errors 1/2 (#46149). 2017-05-30 22:35:41 +02:00
cffparse.h * src/cff/cffparse.h (CFF2_DEFAULT_STACK): Set to 513 also. 2017-03-30 21:07:17 +02:00
cffpic.c Update copyright year. 2017-01-04 20:16:34 +01:00
cffpic.h Make compilation with FT_CONFIG_OPTION_PIC work again. 2017-02-02 07:13:29 +01:00
cfftoken.h Update copyright year. 2017-01-04 20:16:34 +01:00
cfftypes.h [cff] Fix potential bugs in default NDV for CFF2. 2017-03-17 07:28:11 +01:00
module.mk Update copyright year. 2017-01-04 20:16:34 +01:00
rules.mk Update copyright year. 2017-01-04 20:16:34 +01:00