[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[freetype2] master 079a22da0: * src/truetype/ttgload.c (TT_Process_Simpl
From: |
Werner Lemberg |
Subject: |
[freetype2] master 079a22da0: * src/truetype/ttgload.c (TT_Process_Simple_Glyph): Integer overflow. |
Date: |
Tue, 19 Apr 2022 03:35:51 -0400 (EDT) |
branch: master
commit 079a22da037835daf5be2bd9eccf7bc1eaa2e783
Author: Werner Lemberg <wl@gnu.org>
Commit: Werner Lemberg <wl@gnu.org>
* src/truetype/ttgload.c (TT_Process_Simple_Glyph): Integer overflow.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46792
---
src/truetype/ttgload.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/src/truetype/ttgload.c b/src/truetype/ttgload.c
index 0ecde22b7..2ca63d65a 100644
--- a/src/truetype/ttgload.c
+++ b/src/truetype/ttgload.c
@@ -1104,8 +1104,8 @@
for ( ; vec < limit; vec++, u++ )
{
- vec->x = ( FT_MulFix( u->x, x_scale ) + 32 ) >> 6;
- vec->y = ( FT_MulFix( u->y, y_scale ) + 32 ) >> 6;
+ vec->x = ADD_LONG( FT_MulFix( u->x, x_scale ), 32 ) >> 6;
+ vec->y = ADD_LONG( FT_MulFix( u->y, y_scale ), 32 ) >> 6;
}
}
else
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [freetype2] master 079a22da0: * src/truetype/ttgload.c (TT_Process_Simple_Glyph): Integer overflow.,
Werner Lemberg <=