mirrors/freetype
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

* src/truetype/ttinterp.c (TT_RunIns): Use `FT_OFFSET'.

Browse Source 
Reported as

  https://bugs.chromium.org/p/chromium/issues/detail?id=1030614
This commit is contained in:
Werner Lemberg 2019-12-05 08:44:30 +01:00
parent 551bd3a90e
commit dfc9a049de
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
ChangeLog
View File

@ -1,3 +1,11 @@
2019-12-05 Werner Lemberg <wl@gnu.org>
* src/truetype/ttinterp.c (TT_RunIns): Use `FT_OFFSET'.
Reported as
https://bugs.chromium.org/p/chromium/issues/detail?id=1030614
2019-12-03 Werner Lemberg <wl@gnu.org>
More nullptr offset UBSan warnings (#57331, #57347).

2
src/truetype/ttinterp.c
View File

@ -8567,7 +8567,7 @@
case FT_ERR( Invalid_Opcode ):
{
TT_DefRecord* def = exc->IDefs;
TT_DefRecord* limit = def + exc->numIDefs;
TT_DefRecord* limit = FT_OFFSET( def, exc->numIDefs );
for ( ; def < limit; def++ )