summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChris Liddell <chris.liddell@artifex.com>2022-09-06 15:10:19 +0100
committerChris Liddell <chris.liddell@artifex.com>2022-09-07 08:54:28 +0100
commit8d30023842e59a9af26844e6172f8413ff51d7fb (patch)
tree16310722978b17a5f833da089ef5b2784ae5c29e
parent5ceff1f6e6cf17de4eb06729e0bb7bed040dcf55 (diff)
downloadghostpdl-8d30023842e59a9af26844e6172f8413ff51d7fb.tar.gz
oss-fuzz 51045: Bounds check available points in Ins_ISECT()
-rw-r--r--base/ttinterp.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/base/ttinterp.c b/base/ttinterp.c
index 722369fb6..4429439bf 100644
--- a/base/ttinterp.c
+++ b/base/ttinterp.c
@@ -4068,7 +4068,8 @@ static int nInstrCount=0;
if ( BOUNDS( b0, CUR.zp0.n_points ) ||
BOUNDS( b1, CUR.zp0.n_points ) ||
BOUNDS( a0, CUR.zp1.n_points ) ||
- BOUNDS( a1, CUR.zp1.n_points ) )
+ BOUNDS( a1, CUR.zp1.n_points ) ||
+ BOUNDS( point, CUR.zp2.n_points) )
{
CUR.error = TT_Err_Invalid_Reference;
return;