[Git][freetype/freetype][master] [truetype] Fix integer overflow.

[Werner Lemberg (@wl)]

Werner Lemberg pushed to branch master at FreeType / FreeType

Commits:

• b460a506
  by Werner Lemberg at 2021-06-19T07:03:40+02:00

  [truetype] Fix integer overflow.
  
  Reported as
  
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35312
  
  * src/truetype/ttinterp.c (Ins_JMPR): Use `ADD_LONG`.
  

2 changed files:

• ChangeLog
• src/truetype/ttinterp.c

Changes:

ChangeLog

---

	1	+2021-06-19 Werner Lemberg <david@freetype.org>
	2	+
	3	+ [truetype] Fix integer overflow.
	4	+
	5	+ Reported as
	6	+
	7	+ https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35312
	8	+
	9	+ * src/truetype/ttinterp.c (Ins_JMPR): Use `ADD_LONG`.
	10	+
1	11	2021-06-19 Werner Lemberg <david@freetype.org>
2	12
3	13	[autofit] Prevent hinting if there are too many segments.

src/truetype/ttinterp.c

---

...	...	@@ -3593,7 +3593,7 @@
3593	3593	return;
3594	3594	}
3595	3595
3596		- exc->IP += args[0];
	3596	+ exc->IP = ADD_LONG( exc->IP, args[0] );
3597	3597	if ( exc->IP < 0 ||
3598	3598	( exc->callTop > 0 &&
3599	3599	exc->IP > exc->callStack[exc->callTop - 1].Def->end ) )

—
View it on GitLab.
You're receiving this email because of your account on gitlab.freedesktop.org. If you'd like to receive fewer emails, you can adjust your notification settings.