diff options
author | Werner Lemberg <wl@gnu.org> | 2018-11-06 11:15:31 +0100 |
---|---|---|
committer | Werner Lemberg <wl@gnu.org> | 2018-11-06 11:15:31 +0100 |
commit | fbd24523461d57d38bd040d842f9fba2690545cd (patch) | |
tree | b7267935d276f355a7e0d595756929bf82cb06fe | |
parent | 5b86f53dd60c7545dcea75684561199ac3d3e90f (diff) | |
download | freetype2-fbd24523461d57d38bd040d842f9fba2690545cd.tar.gz |
[pshinter] Fix numeric overflow.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11242
* src/pshinter/pshrec.c (ps_dimension_add_t1stem): Implement it.
-rw-r--r-- | ChangeLog | 10 | ||||
-rw-r--r-- | src/pshinter/pshrec.c | 2 |
2 files changed, 11 insertions, 1 deletions
@@ -1,5 +1,15 @@ 2018-11-06 Werner Lemberg <wl@gnu.org> + [pshinter] Fix numeric overflow. + + Reported as + + https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11242 + + * src/pshinter/pshrec.c (ps_dimension_add_t1stem): Implement it. + +2018-11-06 Werner Lemberg <wl@gnu.org> + [psaux] Fix timeout in old CFF engine. Reported as diff --git a/src/pshinter/pshrec.c b/src/pshinter/pshrec.c index 401ab190f..7633c5e61 100644 --- a/src/pshinter/pshrec.c +++ b/src/pshinter/pshrec.c @@ -666,7 +666,7 @@ if ( len == -21 ) { flags |= PS_HINT_FLAG_BOTTOM; - pos += len; + pos = ADD_INT( pos, len ); } len = 0; } |