From ca746f261e1e54cec2f9c8bc7a6f930491e19418 Mon Sep 17 00:00:00 2001 From: Behdad Esfahbod Date: Thu, 13 Sep 2018 20:35:21 +0200 Subject: [PATCH] [dfont] Also check dataLen range in sanitize Just to disagree with myself re being done with this code... --- src/hb-open-file.hh | 1 + 1 file changed, 1 insertion(+) diff --git a/src/hb-open-file.hh b/src/hb-open-file.hh index cd7d78a3e..a1f931d3c 100644 --- a/src/hb-open-file.hh +++ b/src/hb-open-file.hh @@ -432,6 +432,7 @@ struct ResourceForkHeader { TRACE_SANITIZE (this); return_trace (c->check_struct (this) && + data.sanitize (c, this, dataLen) && map.sanitize (c, this, &(this+data))); }