walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix oss-fuzz issue 11675 (ASSERT: count <= str.len) 

Also added an additional error check to avail ()
This commit is contained in:
Michiharu Ariza 2018-12-05 12:51:18 -08:00
parent 8394a6cb25
commit 6708c5595f
2 changed files with 16 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
src/hb-cff-interp-common.hh
View File

@ -391,8 +391,22 @@ struct SubByteStr
inline operator ByteStr (void) const { return ByteStr (str, offset, str.len - offset); } inline operator ByteStr (void) const { return ByteStr (str, offset, str.len - offset); }
inline bool avail (unsigned int count=1) const { return str.check_limit (offset, count); } inline bool avail (unsigned int count=1) const
inline void inc (unsigned int count=1) { offset += count; assert (count <= str.len); } {
return (!in_error () && str.check_limit (offset, count));
}
inline void inc (unsigned int count=1)
{
if (likely (!in_error () && (offset <= str.len) && (offset + count <= str.len)))
{
offset += count;
}
else
{
offset = str.len;
set_error ();
}
}
inline void set_error (void) { error = true; } inline void set_error (void) { error = true; }
inline bool in_error (void) const { return error; } inline bool in_error (void) const { return error; }

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5768186323009536 Normal file
View File

Binary file not shown.