diff --git a/ChangeLog b/ChangeLog index 7854293d1..94879e578 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,13 @@ +2018-10-29 Werner Lemberg + + [base] Fix numeric overflow. + + Reported as + + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11080 + + * src/base/ftoutln.c (FT_Outline_Get_Orientation): Use `MUL_LONG'. + 2018-10-29 Werner Lemberg [cff] Fix numeric overflow. diff --git a/src/base/ftoutln.c b/src/base/ftoutln.c index 85a469737..f54ebdf5c 100644 --- a/src/base/ftoutln.c +++ b/src/base/ftoutln.c @@ -1076,7 +1076,8 @@ v_cur.y = points[n].y >> yshift; area = ADD_LONG( area, - ( v_cur.y - v_prev.y ) * ( v_cur.x + v_prev.x ) ); + MUL_LONG( v_cur.y - v_prev.y, + v_cur.x + v_prev.x ) ); v_prev = v_cur; }