AuroraMiddleware/harfbuzz
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

[kern] Fix access violation in Format3

Browse Source 
Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=11245
This commit is contained in:
Behdad Esfahbod 2018-11-03 14:58:54 -04:00
parent 5570c87f21
commit 0589787ff5
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/hb-ot-kern-table.hh
View File

@ -417,7 +417,11 @@ struct KernSubTableFormat3
hb_array_t<const HBUINT8> rightClass = StructAfter<const UnsizedArrayOf<HBUINT8> > (leftClass).as_array (glyphCount);
hb_array_t<const HBUINT8> kernIndex = StructAfter<const UnsizedArrayOf<HBUINT8> > (rightClass).as_array (leftClassCount * rightClassCount);
unsigned int i = leftClass[left] * rightClassCount + rightClass[right];
unsigned int leftC = leftClass[left];
unsigned int rightC = rightClass[right];
if (unlikely (leftC >= leftClassCount || rightC >= rightClassCount))
return 0;
unsigned int i = leftC * rightClassCount + rightC;
return kernValue[kernIndex[i]];
}