diff options
-rw-r--r-- | pango/opentype/TODO | 1 | ||||
-rw-r--r-- | pango/opentype/hb-ot-layout-gpos-private.hh | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/pango/opentype/TODO b/pango/opentype/TODO index d2b067d5..54560aa8 100644 --- a/pango/opentype/TODO +++ b/pango/opentype/TODO @@ -3,3 +3,4 @@ - cmap14 support in get_glyph callback - size_t? - Figure out compiler selection (add test for link to libstdc++) +- Audit sanitize for int overflows diff --git a/pango/opentype/hb-ot-layout-gpos-private.hh b/pango/opentype/hb-ot-layout-gpos-private.hh index e357b01c..6b20716d 100644 --- a/pango/opentype/hb-ot-layout-gpos-private.hh +++ b/pango/opentype/hb-ot-layout-gpos-private.hh @@ -565,7 +565,7 @@ struct PairPosFormat2 SANITIZE_THIS2 (classDef1, classDef2) && SANITIZE_MEM (values, (valueFormat1.get_size () + valueFormat2.get_size ()) * - class1Count * class2Count); + class1Count * class2Count); /* XXX overflow (in other places too) */ } private: |