walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

[serialize] Check offset base is within (possibly end of) object

This commit is contained in:
Behdad Esfahbod 2019-05-02 15:12:07 -07:00
parent 0f1a6ce826
commit 91176d5b77
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/hb-serialize.hh
View File

@ -295,6 +295,7 @@ struct hb_serialize_context_t
{ {
const object_t::link_t &link = *link_it; const object_t::link_t &link = *link_it;
const object_t &child = *packed[link.objidx]; const object_t &child = *packed[link.objidx];
assert (link.bias <= parent.tail - parent.head);
unsigned offset = (child.head - parent.head) - link.bias; unsigned offset = (child.head - parent.head) - link.bias;
if (link.is_wide) if (link.is_wide)