walkero
/
harfbuzz
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

[subset] fix infinite loop caused by alloc failure in repacker. 

Fixes: https://oss-fuzz.com/testcase-detail/5609112151916544.
This commit is contained in:
Garret Rieger 2021-04-19 17:18:05 -07:00 committed by Behdad Esfahbod
parent 0e845d973e
commit ec4321068b
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/hb-repacker.hh
View File

@ -227,10 +227,10 @@ struct graph_t
hb_vector_t<unsigned> queue;
hb_vector_t<vertex_t> sorted_graph;
hb_vector_t<unsigned> id_map;
check_success (id_map.resize (vertices_.length));
if (unlikely (!check_success (id_map.resize (vertices_.length)))) return;
hb_vector_t<unsigned> removed_edges;
check_success (removed_edges.resize (vertices_.length));
if (unlikely (!check_success (removed_edges.resize (vertices_.length)))) return;
update_incoming_edge_count ();
queue.push (root_idx ());
@ -284,10 +284,10 @@ struct graph_t
hb_priority_queue_t queue;
hb_vector_t<vertex_t> sorted_graph;
hb_vector_t<unsigned> id_map;
check_success (id_map.resize (vertices_.length));
if (unlikely (!check_success (id_map.resize (vertices_.length)))) return;
hb_vector_t<unsigned> removed_edges;
check_success (removed_edges.resize (vertices_.length));
if (unlikely (!check_success (removed_edges.resize (vertices_.length)))) return;
update_incoming_edge_count ();
queue.insert (root ().modified_distance (0), root_idx ());

BIN
test/fuzzing/fonts/clusterfuzz-testcase-minimized-hb-subset-fuzzer-5609112151916544 Normal file
View File

Binary file not shown.