shithub: freetype+ttf2subf

Download patch

ref: 99f23d6ff2203966d210bccd49eacc62a20328f9
parent: cc17f852d575a8a66f9be51461af550d0f413891
author: Werner Lemberg <[email protected]>
date: Tue Sep 17 09:22:28 EDT 2019 

* src/sfnt/sfwoff2.c (woff2_open_font): Check table index.

Reported as

  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17100

git/fs: mount .git/fs: mount/attach disallowed 
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,11 @@
+2019-09-17  Werner Lemberg  <[email protected]>
+
+	* src/sfnt/sfwoff2.c (woff2_open_font): Check table index.
+
+	Reported as
+
+	  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=17100
+
 2019-09-15  Avi Halachmi (:avih)  <[email protected]>
 
 	[cmake] Don't fail if brotli is missing (#56894).
--- a/src/sfnt/sfwoff2.c
+++ b/src/sfnt/sfwoff2.c
@@ -1975,6 +1975,13 @@
             goto Exit;
 
           FT_TRACE6(( "%hu ", table_index ));
+          if ( table_index >= woff2.num_tables )
+          {
+            FT_ERROR(( "woff2_open_font: invalid table index\n" ));
+            error = FT_THROW( Invalid_Table );
+            goto Exit;
+          }
+
           ttc_font->table_indices[j] = table_index;
 
           table = indices[table_index];