AuroraMiddleware/harfbuzz
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Fix another memory access issue discovered by libFuzzer

Browse Source 
Fixes https://github.com/behdad/harfbuzz/issues/139#issuecomment-146984679
This commit is contained in:
Behdad Esfahbod 2015-10-13 00:30:50 -04:00
parent c1a5dc46c2
commit f966649747
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/hb-ot-layout-gpos-table.hh
View File

@ -704,6 +704,8 @@ struct PairPosFormat1
{
TRACE_SANITIZE (this);
if (!c->check_struct (this)) return_trace (false);
unsigned int len1 = valueFormat1.get_len ();
unsigned int len2 = valueFormat2.get_len ();
PairSet::sanitize_closure_t closure = {
@ -713,7 +715,7 @@ struct PairPosFormat1
1 + len1 + len2
};
return_trace (c->check_struct (this) && coverage.sanitize (c, this) && pairSet.sanitize (c, this, &closure));
return_trace (coverage.sanitize (c, this) && pairSet.sanitize (c, this, &closure));
}
protected: