shithub: freetype+ttf2subf

Download patch

ref: 74cdd75f6fb5c6df74f12e4724ecd84edab0dddd
parent: 1c4004bb345080fb5356402f30af83e648d0b503
author: Ben Wagner <[email protected]>
date: Tue Nov 27 12:55:40 EST 2018 

[truetype] Fix numeric overflow (#55103).

* src/truetype/ttgload.c (compute_glyph_metrics): Use `SUB_LONG'.

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2018-11-27  Ben Wagner  <[email protected]>
+
+	[truetype Fix numeric overflow (#55103).
+
+	* src/truetype/ttgload.c (compute_glyph_metrics): Use `SUB_LONG'.
+
 2018-11-18  Alexei Podtelezhnikov  <[email protected]>
 
 	[builds] Belated DLL support with vc2002-vc2008.
--- a/src/truetype/ttgload.c
+++ b/src/truetype/ttgload.c
@@ -2160,7 +2160,7 @@
 
     glyph->metrics.horiBearingX = bbox.xMin;
     glyph->metrics.horiBearingY = bbox.yMax;
-    glyph->metrics.horiAdvance  = loader->pp2.x - loader->pp1.x;
+    glyph->metrics.horiAdvance  = SUB_LONG(loader->pp2.x, loader->pp1.x);
 
     /* Adjust advance width to the value contained in the hdmx table   */
     /* unless FT_LOAD_COMPUTE_METRICS is set or backward compatibility */