| commit | 0aca17cf53f099f9ea34b3797949076073b60b5d | [log] [tgz] |
|---|---|---|
| author | Werner Lemberg <wl@gnu.org> | Tue Aug 22 08:25:14 2017 +0200 |
| committer | Werner Lemberg <wl@gnu.org> | Tue Aug 22 08:25:14 2017 +0200 |
| tree | 1a68b395a6763faf6dfe9f3ce8ad916258e0bde2 | |
| parent | 7653c76533dcde3d87bd7af5a2c12e8c95412c12 [diff] |
[truetype] Integer overflow. Changes triggered by https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3107 * src/truetype/ttinterp.c (Ins_MDRP, Ins_MIRP, Ins_ALIGNPTS): Use NEG_LONG.