[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[freetype2] master dfddc2d: [pshinter] Handle numeric overflow.
From: |
Werner LEMBERG |
Subject: |
[freetype2] master dfddc2d: [pshinter] Handle numeric overflow. |
Date: |
Mon, 17 Sep 2018 02:04:37 -0400 (EDT) |
branch: master
commit dfddc2d97596489134d21ed6224462331cb1cd73
Author: Werner Lemberg <address@hidden>
Commit: Werner Lemberg <address@hidden>
[pshinter] Handle numeric overflow.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10396
* src/pshinter/pshglob.c: Include FT_INTERNAL_CALC_H.
(psh_blues_snap_stems): Mask numeric overflow.
---
ChangeLog | 13 ++++++++++++-
src/pshinter/pshglob.c | 3 ++-
2 files changed, 14 insertions(+), 2 deletions(-)
diff --git a/ChangeLog b/ChangeLog
index be013e4..40e9f91 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,14 @@
+2018-09-17 Werner Lemberg <address@hidden>
+
+ [pshinter] Handle numeric overflow.
+
+ Reported as
+
+ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10396
+
+ * src/pshinter/pshglob.c: Include FT_INTERNAL_CALC_H.
+ (psh_blues_snap_stems): Mask numeric overflow.
+
2018-09-13 Werner Lemberg <address@hidden>
[truetype] Some fixes for VF checks.
@@ -669,7 +680,7 @@
[cid] Trace PostScript dictionaries.
- * src/cid/cidload.c: Include FT_INTERNAL_POSTSCRIPT_AUX_H
+ * src/cid/cidload.c: Include FT_INTERNAL_POSTSCRIPT_AUX_H.
(cid_load_keyword, cid_parse_font_matrix, parse_fd_array,
parse_expansion_factor, cid_parse_dict): Add tracing calls.
(parse_font_name): New function to trace `/FontName' keywords in
diff --git a/src/pshinter/pshglob.c b/src/pshinter/pshglob.c
index f6859cd..5f5ae2d 100644
--- a/src/pshinter/pshglob.c
+++ b/src/pshinter/pshglob.c
@@ -20,6 +20,7 @@
#include <ft2build.h>
#include FT_FREETYPE_H
#include FT_INTERNAL_OBJECTS_H
+#include FT_INTERNAL_CALC_H
#include "pshglob.h"
#ifdef DEBUG_HINTER
@@ -568,7 +569,7 @@
for ( ; count > 0; count--, zone++ )
{
- delta = stem_top - zone->org_bottom;
+ delta = SUB_LONG( stem_top, zone->org_bottom );
if ( delta < -blues->blue_fuzz )
break;
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [freetype2] master dfddc2d: [pshinter] Handle numeric overflow.,
Werner LEMBERG <=