rgraves
/
freetype2
forked from minhngoc25a/freetype2
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

* src/sfnt/sfwoff2.c (woff2_open_font): Check `num_fonts' for TTCs. 

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18494
This commit is contained in:
Werner Lemberg 2019-10-25 21:29:13 +02:00
parent 0a3d2bb99b
commit b75031a26e
2 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2019-10-25 Werner Lemberg <wl@gnu.org>
* src/sfnt/sfwoff2.c (woff2_open_font): Check `num_fonts' for TTCs.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=18494
2019-10-22 Werner Lemberg <wl@gnu.org>
* src/sfnt/sfwoff2.c (woff2_open_font): Avoid undefined shift.

6
src/sfnt/sfwoff2.c
View File

@ -1948,6 +1948,12 @@
if ( READ_255USHORT( woff2.num_fonts ) )
goto Exit;
if ( !woff2.num_fonts )
{
error = FT_THROW( Invalid_Table );
goto Exit;
}
FT_TRACE4(( "Number of fonts in TTC: %ld\n", woff2.num_fonts ));
if ( FT_NEW_ARRAY( woff2.ttc_fonts, woff2.num_fonts ) )