[HB] Add note about auditing sanitize code for overflows
This commit is contained in:
parent
15232e26f4
commit
5769538abf
1
src/TODO
1
src/TODO
@ -3,3 +3,4 @@
|
|||||||
- cmap14 support in get_glyph callback
|
- cmap14 support in get_glyph callback
|
||||||
- size_t?
|
- size_t?
|
||||||
- Figure out compiler selection (add test for link to libstdc++)
|
- Figure out compiler selection (add test for link to libstdc++)
|
||||||
|
- Audit sanitize for int overflows
|
||||||
|
@ -565,7 +565,7 @@ struct PairPosFormat2
|
|||||||
SANITIZE_THIS2 (classDef1, classDef2) &&
|
SANITIZE_THIS2 (classDef1, classDef2) &&
|
||||||
SANITIZE_MEM (values,
|
SANITIZE_MEM (values,
|
||||||
(valueFormat1.get_size () + valueFormat2.get_size ()) *
|
(valueFormat1.get_size () + valueFormat2.get_size ()) *
|
||||||
class1Count * class2Count);
|
class1Count * class2Count); /* XXX overflow (in other places too) */
|
||||||
}
|
}
|
||||||
|
|
||||||
private:
|
private:
|
||||||
|
Loading…
Reference in New Issue
Block a user