AuroraMiddleware/freetype
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

* src/type42/t42parse.c (t42_parse_sfnts): One more format check.

Browse Source 
Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9832
This commit is contained in:
Werner Lemberg 2018-08-13 08:46:53 +02:00
parent 37c7b81794
commit 50486df1e6
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2018-08-13 Werner Lemberg <wl@gnu.org>
* src/type42/t42parse.c (t42_parse_sfnts): One more format check.
Reported as
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9832
2018-08-11 Werner Lemberg <wl@gnu.org>
* src/base/ftcalc.c (FT_Matrix_Check): Fix integer overflow.

8
src/type42/t42parse.c
View File

@ -595,6 +595,14 @@
else if ( *cur == '<' )
{
if ( string_buf && !allocated )
{
FT_ERROR(( "t42_parse_sfnts: "
"can't handle mixed binary and hex strings\n" ));
error = FT_THROW( Invalid_File_Format );
goto Fail;
}
T1_Skip_PS_Token( parser );
if ( parser->root.error )
goto Exit;