[Git][freetype/freetype][master] * src/truetype/ttgload.c (TT_Process_Simple_Glyph): Integer overflow.

[Werner Lemberg (@wl)]

Werner Lemberg pushed to branch master at FreeType / FreeType

Commits:

• 079a22da
  by Werner Lemberg at 2022-04-19T09:34:10+02:00

  * src/truetype/ttgload.c (TT_Process_Simple_Glyph): Integer overflow.
  
  Reported as
  
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46792
  

1 changed file:

• src/truetype/ttgload.c

Changes:

src/truetype/ttgload.c

---

...	...	@@ -1104,8 +1104,8 @@
1104	1104
1105	1105	for ( ; vec < limit; vec++, u++ )
1106	1106	{
1107		- vec->x = ( FT_MulFix( u->x, x_scale ) + 32 ) >> 6;
1108		- vec->y = ( FT_MulFix( u->y, y_scale ) + 32 ) >> 6;
	1107	+ vec->x = ADD_LONG( FT_MulFix( u->x, x_scale ), 32 ) >> 6;
	1108	+ vec->y = ADD_LONG( FT_MulFix( u->y, y_scale ), 32 ) >> 6;
1109	1109	}
1110	1110	}
1111	1111	else

—
View it on GitLab.
You're receiving this email because of your account on gitlab.freedesktop.org. If you'd like to receive fewer emails, you can adjust your notification settings.