[subset] fixes https://oss-fuzz.com/testcase-detail/6173520787800064.

Caused by incorrect bounds check in glyph closure for context lookups.
2021-03-30 13:20:50 -07:00 · 2021-03-30 13:20:50 -07:00 · adca4ce071
commit adca4ce071
parent 9f77a0c1ff
2 changed files with 1 additions and 1 deletions
--- a/src/hb-ot-layout-gsubgpos.hh
+++ b/src/hb-ot-layout-gsubgpos.hh
@ -1248,7 +1248,7 @@ static void context_closure_recurse_lookups (hb_closure_context_t *c,
  for (unsigned int i = 0; i < lookupCount; i++)
  {
    unsigned seqIndex = lookupRecord[i].sequenceIndex;
-    if (seqIndex > inputCount) continue;
+    if (seqIndex >= inputCount) continue;

    hb_set_t *pos_glyphs = hb_set_create ();

--- a/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-6173520787800064
+++ b/test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-6173520787800064