AuroraMiddleware/harfbuzz
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

fix fuzzer testcase: https://oss-fuzz.com/testcase-detail/5417934246772736

Browse Source
This commit is contained in:
Qunxin Liu 2021-06-02 15:07:18 -07:00 committed by Behdad Esfahbod
parent 18f61210a4
commit 1b6008ca62
2 changed files with 9 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/hb-ot-color-colr-table.hh
View File

@ -775,15 +775,15 @@ struct BaseGlyphV1Record
return_trace (out->paint.serialize_subset (c, paint, src_base)); return_trace (out->paint.serialize_subset (c, paint, src_base));
} }
bool sanitize (hb_sanitize_context_t *c) const bool sanitize (hb_sanitize_context_t *c, const void *base) const
{ {
TRACE_SANITIZE (this); TRACE_SANITIZE (this);
return_trace (likely (c->check_struct (this) && paint.sanitize (c, this))); return_trace (likely (c->check_struct (this) && paint.sanitize (c, base)));
} }
public: public:
HBGlyphID glyphId; /* Glyph ID of reference glyph */ HBGlyphID glyphId; /* Glyph ID of reference glyph */
Offset32To<Paint> paint; /* Offset (from beginning of BaseGlyphV1Record) to Paint, Offset32To<Paint> paint; /* Offset (from beginning of BaseGlyphV1Record array) to Paint,
* Typically PaintColrLayers */ * Typically PaintColrLayers */
public: public:
DEFINE_SIZE_STATIC (6); DEFINE_SIZE_STATIC (6);
@ -809,6 +809,12 @@ struct BaseGlyphV1List : SortedArray32Of<BaseGlyphV1Record>
return_trace (out->len != 0); return_trace (out->len != 0);
} }
bool sanitize (hb_sanitize_context_t *c) const
{
TRACE_SANITIZE (this);
return_trace (SortedArray32Of<BaseGlyphV1Record>::sanitize (c, this));
}
}; };
struct LayerV1List : Array32OfOffset32To<Paint> struct LayerV1List : Array32OfOffset32To<Paint>

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5417934246772736 Normal file
View File

Binary file not shown.