[Git][freetype/freetype][master] * src/truetype/ttgxvar.c (ft_var_to_normalized): Integer overflow.

[Werner Lemberg (@wl)]

Werner Lemberg pushed to branch master at FreeType / FreeType

Commits:

• 546237e1
  by Werner Lemberg at 2024-02-23T11:55:53+01:00

  * src/truetype/ttgxvar.c (ft_var_to_normalized): Integer overflow.
  
  Reported as
  
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=66543
  

1 changed file:

• src/truetype/ttgxvar.c

Changes:

src/truetype/ttgxvar.c

---

...	...	@@ -2142,7 +2142,7 @@
2142	2142	innerIndex );
2143	2143
2144	2144	/* Convert to 16.16 format before adding. */
2145		- v += delta * 4;
	2145	+ v += MUL_INT( delta, 4 );
2146	2146
2147	2147	/* Clamp value range. */
2148	2148	v = v >= 0x10000L ? 0x10000 : v;

—
View it on GitLab.
You're receiving this email because of your account on gitlab.freedesktop.org. Manage all notifications · Help