shithub: freetype+ttf2subf

Download patch

ref: 7b855ed9cf8c48841e72369ea3ebcbf8486e5e06
parent: fea435fbf855e9ac2cd3ced80175d64f1bace22c
author: Armin Hasitzka <[email protected]>
date: Mon Sep 10 19:41:04 EDT 2018 

* src/pshinter/pshrec.c (t2_hints_stems): Mask numeric overflow.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10215

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
+2018-09-10  Armin Hasitzka  <[email protected]>
+
+	* src/pshinter/pshrec.c (t2_hints_stems): Mask numeric overflow.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=10215
+
 2018-09-09  Ben Wagner  <[email protected]>
 
 	* builds/freetype.mk (refdoc-venv): Ensure python version (#54631).
--- a/src/pshinter/pshrec.c
+++ b/src/pshinter/pshrec.c
@@ -1187,7 +1187,7 @@
       /* compute integer stem positions in font units */
       for ( n = 0; n < count * 2; n++ )
       {
-        y       += coords[n];
+        y        = ADD_LONG( y, coords[n] );
         stems[n] = FIXED_TO_INT( y );
       }