mirror of https://github.com/freetype/freetype
* src/truetype/ttgxvar.c (tt_hvadvance_adjust): Integer overflow.
Reported as https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50462
This commit is contained in:
parent
63ccaef07a
commit
e6fda039ad
|
@ -42,6 +42,7 @@
|
|||
#include <ft2build.h>
|
||||
#include <freetype/internal/ftdebug.h>
|
||||
#include FT_CONFIG_CONFIG_H
|
||||
#include <freetype/internal/ftcalc.h>
|
||||
#include <freetype/internal/ftstream.h>
|
||||
#include <freetype/internal/sfnt.h>
|
||||
#include <freetype/tttags.h>
|
||||
|
@ -1207,7 +1208,7 @@
|
|||
delta == 1 ? "" : "s",
|
||||
vertical ? "VVAR" : "HVAR" ));
|
||||
|
||||
*avalue += delta;
|
||||
*avalue = ADD_INT( *avalue, delta );
|
||||
}
|
||||
|
||||
Exit:
|
||||
|
|
Loading…
Reference in New Issue