diff options
| author | Werner Lemberg <wl@gnu.org> | 2022-03-19 09:30:45 +0100 |
|---|---|---|
| committer | Michael Brüning <michael.bruning@qt.io> | 2022-08-03 10:08:26 +0000 |
| commit | 4477a5086bada2bf8dc8b408808ef32a6337f935 (patch) | |
| tree | 224ec3bb1540f4db6ca71c0341871b459178396e | |
| parent | 72fbb0bc7915dedd7742873ab9289767f1301291 (diff) | |
| download | qtwebengine-chromium-4477a5086bada2bf8dc8b408808ef32a6337f935.tar.gz | |
[Backport] CVE-2022-27405 (2/2)
Cherry-pick of patch originally submitted at
https://gitlab.freedesktop.org/freetype/freetype/-/commit/d014387ad4a5dd04d8e7f99587c7dacb70261924:
* src/base/ftobjs.c (ft_open_face_internal): Thinko.
Change-Id: I87abda1c902d1917bd9fbf7b156911a09ebe1b2b
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
| -rw-r--r-- | chromium/third_party/freetype/src/src/base/ftobjs.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/chromium/third_party/freetype/src/src/base/ftobjs.c b/chromium/third_party/freetype/src/src/base/ftobjs.c index e701e23a308..158dbc61adb 100644 --- a/chromium/third_party/freetype/src/src/base/ftobjs.c +++ b/chromium/third_party/freetype/src/src/base/ftobjs.c @@ -2456,6 +2456,7 @@ face_index &= 0x7FFFFFFFL; else { + face_index = -face_index; face_index &= 0x7FFFFFFFL; face_index = -face_index; } |