diff options
| author | Ben Wagner <bungeman@google.com> | 2020-10-23 08:29:14 +0200 |
|---|---|---|
| committer | Werner Lemberg <wl@gnu.org> | 2020-10-23 08:32:30 +0200 |
| commit | 007c109b4594c5e63948bd08b4d5011ad76ffb10 (patch) | |
| tree | 4ca679709ce7a329d9460b4af044a94450372759 | |
| parent | 6a2b3e4007e794bfc6c91030d0ed987f925164a8 (diff) | |
| download | freetype2-007c109b4594c5e63948bd08b4d5011ad76ffb10.tar.gz | |
* src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak (#59322).
The issue is that `rows` is allocated but will not be freed in the
event that the call to `png_read_image` fails and calls `longjmp`.
| -rw-r--r-- | ChangeLog | 7 | ||||
| -rw-r--r-- | src/sfnt/pngshim.c | 1 |
2 files changed, 8 insertions, 0 deletions
@@ -1,3 +1,10 @@ +2020-10-23 Ben Wagner <bungeman@google.com> + + * src/sfnt/pngshim.c (Load_SBit_Png): Fix memory leak (#59322). + + The issue is that `rows` is allocated but will not be freed in the + event that the call to `png_read_image` fails and calls `longjmp`. + 2020-10-20 Werner Lemberg <wl@gnu.org> * Version 2.10.4 released. diff --git a/src/sfnt/pngshim.c b/src/sfnt/pngshim.c index f55016122..d4e43a9f4 100644 --- a/src/sfnt/pngshim.c +++ b/src/sfnt/pngshim.c @@ -443,6 +443,7 @@ png_read_end( png, info ); DestroyExit: + FT_FREE( rows ); png_destroy_read_struct( &png, &info, NULL ); FT_Stream_Close( &stream ); |