AuroraMiddleware/freetype
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[lzw] Avoid invalid left shift.

Browse Source 
* src/lzw/ftzopen.c (ft_lzwstate_get_code): Limit `num_bits'.
This commit is contained in:
Werner Lemberg 2016-08-16 09:46:40 +02:00
parent 8d7b9198e3
commit 548f68d805
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
ChangeLog
View File

@ -1,3 +1,9 @@
2016-08-16 Werner Lemberg <wl@gnu.org>
[lzw] Avoid invalid left shift.
* src/lzw/ftzopen.c (ft_lzwstate_get_code): Limit `num_bits'.
2016-08-16 Werner Lemberg <wl@gnu.org>
[lzw] Avoid buffer overrun.

3
src/lzw/ftzopen.c
View File

@ -65,6 +65,9 @@
FT_Int result;
if ( num_bits > LZW_MAX_BITS )
return -1;
if ( state->buf_clear ||
offset >= state->buf_size ||
state->free_ent >= state->free_bits )