walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

[avar2] Fix mapping when coords length don't match 

Ouch.

Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49407
This commit is contained in:
Behdad Esfahbod 2022-07-23 10:50:26 -06:00
parent 06c3ec0a19
commit 32c85b8c8c
2 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/hb-ot-var-avar-table.hh
View File

@ -186,6 +186,9 @@ struct avar
if (version.major < 2) if (version.major < 2)
return; return;
for (; count < axisCount; count++)
map = &StructAfter<SegmentMaps> (*map);
const auto &v2 = * (const avarV2Tail *) map; const auto &v2 = * (const avarV2Tail *) map;
const auto &varidx_map = this+v2.varIdxMap; const auto &varidx_map = this+v2.varIdxMap;

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-shape-fuzzer-4523349576908800 Normal file
View File

Binary file not shown.