[kerx] Sanitize more

This commit is contained in:
Behdad Esfahbod 2018-10-13 13:48:22 -04:00
parent 71f76f2f39
commit de6e414c56
1 changed files with 6 additions and 3 deletions

View File

@ -256,7 +256,8 @@ struct KerxSubTableFormat2
TRACE_SANITIZE (this); TRACE_SANITIZE (this);
return_trace (likely (rowWidth.sanitize (c) && return_trace (likely (rowWidth.sanitize (c) &&
leftClassTable.sanitize (c, this) && leftClassTable.sanitize (c, this) &&
rightClassTable.sanitize (c, this))); rightClassTable.sanitize (c, this) &&
c->check_range (this, array)));
} }
struct accelerator_t struct accelerator_t
@ -516,10 +517,12 @@ struct KerxSubTableFormat6
is_long () ? is_long () ?
( (
u.l.rowIndexTable.sanitize (c, this) && u.l.rowIndexTable.sanitize (c, this) &&
u.l.columnIndexTable.sanitize (c, this) u.l.columnIndexTable.sanitize (c, this) &&
c->check_range (this, u.l.array)
) : ( ) : (
u.s.rowIndexTable.sanitize (c, this) && u.s.rowIndexTable.sanitize (c, this) &&
u.s.columnIndexTable.sanitize (c, this) u.s.columnIndexTable.sanitize (c, this) &&
c->check_range (this, u.s.array)
))); )));
} }