* src/truetype/ttgxvar.c (ft_var_to_normalized): Integer overflow.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66543
This commit is contained in:
Werner Lemberg 2024-02-23 11:55:53 +01:00
parent 47574f7ea4
commit 546237e1bb

View File

@ -2142,7 +2142,7 @@
innerIndex );
/* Convert to 16.16 format before adding. */
v += delta * 4;
v += MUL_INT( delta, 4 );
/* Clamp value range. */
v = v >= 0x10000L ? 0x10000 : v;