walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

[subset] fix heap buffer overflow found by fuzzer.

This commit is contained in:
Garret Rieger 2021-02-12 15:16:59 -08:00 committed by Behdad Esfahbod
parent ae860db893
commit 5ca353a2d0
3 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/hb-ot-layout-gpos-table.hh
View File

@ -2064,6 +2064,9 @@ struct LigatureArray : OffsetListOf<LigatureAttach>
unsigned ligature_count = 0; unsigned ligature_count = 0;
for (hb_codepoint_t gid : coverage) for (hb_codepoint_t gid : coverage)
{ {
if (ligature_count >= this->len)
break;
ligature_count++; ligature_count++;
if (!glyphset.has (gid)) continue; if (!glyphset.has (gid)) continue;

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-4901143794810880 Normal file
View File

Binary file not shown.

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-6372147008241664 Normal file
View File

Binary file not shown.