diff options
| author | Werner Lemberg <wl@gnu.org> | 2018-04-17 12:25:17 +0200 |
|---|---|---|
| committer | Werner Lemberg <wl@gnu.org> | 2018-04-17 12:25:17 +0200 |
| commit | 2a1597826a84275660e7410368200b37f85ffdaf (patch) | |
| tree | 2f6e67d4fbe40a1e40af1cbf3a75cde26361d044 | |
| parent | 632a11f91f0d932ac498e9e6ca022c9903ab05e9 (diff) | |
| download | freetype2-2a1597826a84275660e7410368200b37f85ffdaf.tar.gz | |
[truetype] Integer overflow issues.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7739
* src/truetype/ttinterp.c (Ins_CEILING): Use FT_PIX_CEIL_LONG.
| -rw-r--r-- | ChangeLog | 10 | ||||
| -rw-r--r-- | src/truetype/ttinterp.c | 2 |
2 files changed, 11 insertions, 1 deletions
@@ -1,3 +1,13 @@ +2018-04-17 Werner Lemberg <wl@gnu.org> + + [truetype] Integer overflow issues. + + Reported as + + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=7739 + + * src/truetype/ttinterp.c (Ins_CEILING): Use FT_PIX_CEIL_LONG. + 2018-04-16 Werner Lemberg <wl@gnu.org> [truetype] Integer overflow issues. diff --git a/src/truetype/ttinterp.c b/src/truetype/ttinterp.c index 336b46b42..da9b595ab 100644 --- a/src/truetype/ttinterp.c +++ b/src/truetype/ttinterp.c @@ -2954,7 +2954,7 @@ static void Ins_CEILING( FT_Long* args ) { - args[0] = FT_PIX_CEIL( args[0] ); + args[0] = FT_PIX_CEIL_LONG( args[0] ); } |